Age verification means identity verification.
-
@jmcs That is a safe assumption.
I could care less. Google meta NSA you already been screwed. If this helps even 1 kid its worth it.
Mastodon is full of freaks and freaks need to be controlled.
-
Age verification means identity verification. And it removes the final remnants of anonymity from the internet. Anonymity in the sense of being in control of the decision to share your identity is however a requirement for a public space. The internet can never be a public space with identity verification. That’s what is at stake, in my personal opinion.
1/2
@jwildeboer What bothers me isn't necessarily the anonymity part if it. I've always used my real name online, and I tend to prefer the parts of the internet where people talk to each other as if they're irl. I just don't trust the government.
-
J jwcph@helvede.net shared this topic
-
@michael It is a thread clearly marked with 1/2 and 2/2, both posts are public, nothing is hidden here. There is no contradiction. Current approaches are a mixture of commercial offering where a 3rd party requests identification data to give you back some sort of token that you can use to proof to a website that your are of a certain age. It is centralised. Other solutions that do zero proof exist but are not widely used nor is that level of pseudonymity prescribed by law/regulation.
@jwildeboer @michael Also, let's not forget that there is no way in hell any of these systems, however "secure" & "private" on paper, will not leak and/or abuse data. To believe anything else is literally to believe in magic.
- so even if you don't believe that age verification = ID verification (which it is; there's no other way to do it), being against it still isn't dumb, but rather extremely sensible for this reason alone.
-
And to those that say that anonymity (or rather pseudonymity) can be implemented with zero knowledge proofs — yes. But that’s not what is being used in currently preferred age/identity verification „solutions“ which tend to be centralised, commercial offerings.
2/2
@jwildeboer Exactly. There are combined technical/regulatory approaches which would allow for age (or any other legally mandated trait) verification that protects the user and are fairly straightforward to implement* in a setting of good faith interest by all parties. But that is not the setting we are in
* (I have sketched out what such a technique might look like https://gist.github.com/jimfl/ff930632d9ee7dd68aeaa777ea714326)
-
@jwildeboer @michael Also, let's not forget that there is no way in hell any of these systems, however "secure" & "private" on paper, will not leak and/or abuse data. To believe anything else is literally to believe in magic.
- so even if you don't believe that age verification = ID verification (which it is; there's no other way to do it), being against it still isn't dumb, but rather extremely sensible for this reason alone.
There's absolutely ways to do it without id. At the simplest, issue everybody that's 18+ a certificate + key. The certificate can be issued without any identifying information. Have the site send a challenge to the user and have them sign that with their key and return the signed challenge + certificate. You've just proved they are 18+ without divulging any information and there is no risk for leaks at the site.
It's a little more complex than that because it is very easy to use somebody else's key/certificate and the certificate itself can be used as a pseudonymous identifier if used directly against the site.
This can be made decentralized (site decides which certificate issuers they trust) and can be made entirely offline.
Just because sites now require uploading a picture of your passport or most government age verification mandates require something similar, doesn't mean it isn't possible to make it secure. -
There's absolutely ways to do it without id. At the simplest, issue everybody that's 18+ a certificate + key. The certificate can be issued without any identifying information. Have the site send a challenge to the user and have them sign that with their key and return the signed challenge + certificate. You've just proved they are 18+ without divulging any information and there is no risk for leaks at the site.
It's a little more complex than that because it is very easy to use somebody else's key/certificate and the certificate itself can be used as a pseudonymous identifier if used directly against the site.
This can be made decentralized (site decides which certificate issuers they trust) and can be made entirely offline.
Just because sites now require uploading a picture of your passport or most government age verification mandates require something similar, doesn't mean it isn't possible to make it secure.@michael @jwcph @jwildeboer its a little more complex
yeah, especially if you ignore all the rest. There are reasonas why we are fighthing stuff like #chatcontrol continously. I also lost count of what Crypto Wars we are at now
So falling in a trap about tech, and looking at this as an academic problem to solve, is the first problem making your responses, well naive. Look at Denmark and our politicians
Even if a perfect valid solution is proposed it will be subverted and twisted sooner or ltr
-
@michael @jwcph @jwildeboer its a little more complex
yeah, especially if you ignore all the rest. There are reasonas why we are fighthing stuff like #chatcontrol continously. I also lost count of what Crypto Wars we are at now
So falling in a trap about tech, and looking at this as an academic problem to solve, is the first problem making your responses, well naive. Look at Denmark and our politicians
Even if a perfect valid solution is proposed it will be subverted and twisted sooner or ltr
@kramse @michael @jwildeboer Also, *none of all that works if it can't be unequivocally tied to a specific person's identity*, which never can or will be secure or safe from abuse.
How is this so hard to understand for some people?
-
ADDENDUM: I said „final remnants“ because the ad/tracking mafia already has powerful capabilities to identify individuals with high probability of correctness. Avoiding their fingerprinting and correlation capabilities is almost impossible.
@jwildeboer Personally, I don't even care about internet anonymity in itself as much as I do the stories coming out of the US where ICE agents are visiting people to intimidate them over their political views. In my opinion, removing our ability to communicate anonymously is a death sentence for a functioning democracy.
-
@jwildeboer Personally, I don't even care about internet anonymity in itself as much as I do the stories coming out of the US where ICE agents are visiting people to intimidate them over their political views. In my opinion, removing our ability to communicate anonymously is a death sentence for a functioning democracy.
-
@jwildeboer Personally, I don't even care about internet anonymity in itself as much as I do the stories coming out of the US where ICE agents are visiting people to intimidate them over their political views. In my opinion, removing our ability to communicate anonymously is a death sentence for a functioning democracy.
@zazzoo @jwildeboer This
-
@jwildeboer Personally, I don't even care about internet anonymity in itself as much as I do the stories coming out of the US where ICE agents are visiting people to intimidate them over their political views. In my opinion, removing our ability to communicate anonymously is a death sentence for a functioning democracy.
I agree. We must protect the ability to be anonymous on the Internet
-
@kramse @michael @jwildeboer Also, *none of all that works if it can't be unequivocally tied to a specific person's identity*, which never can or will be secure or safe from abuse.
How is this so hard to understand for some people?
Then explain what won't work unless it's tied to a person's identity. Be specific. -
@michael @jwcph @jwildeboer its a little more complex
yeah, especially if you ignore all the rest. There are reasonas why we are fighthing stuff like #chatcontrol continously. I also lost count of what Crypto Wars we are at now
So falling in a trap about tech, and looking at this as an academic problem to solve, is the first problem making your responses, well naive. Look at Denmark and our politicians
Even if a perfect valid solution is proposed it will be subverted and twisted sooner or ltr
It is a problem that kids are getting groomed on Discord and in Roblox. It is a problem that kids brains are getting fucked up by SoMe.
Age verification is one way to solve that. It may not be the only way to solve it, but a lot of people like to complain about chat control without being constructive about a solution to the issues.
I agree 100% that ID verification is not a good idea. If we can have age verification without ID verification, I'd be fine with age verification. If we can solve SoMe/Roblox/Discord without age verification, I'd also be fine with that.
If we get dug down in trenches that are either "ID verification everywhere" or "ignore SoMe/Roblox/Discord," we'll get stuck in a stand-off like the US gun control problem. We need to be honest about what we want, and call out people (like politicians) that claim to want one thing (fix SoMe/Roblox/Discord) but really want to sneak in another (ID verification).
We don't need a perfect solution that lasts forever. If it gets bypassed in 5 years, that's not an issue, we can just make something else. The issues are simple solvable UX and software development issues, not fundamental ones. -
It is a problem that kids are getting groomed on Discord and in Roblox. It is a problem that kids brains are getting fucked up by SoMe.
Age verification is one way to solve that. It may not be the only way to solve it, but a lot of people like to complain about chat control without being constructive about a solution to the issues.
I agree 100% that ID verification is not a good idea. If we can have age verification without ID verification, I'd be fine with age verification. If we can solve SoMe/Roblox/Discord without age verification, I'd also be fine with that.
If we get dug down in trenches that are either "ID verification everywhere" or "ignore SoMe/Roblox/Discord," we'll get stuck in a stand-off like the US gun control problem. We need to be honest about what we want, and call out people (like politicians) that claim to want one thing (fix SoMe/Roblox/Discord) but really want to sneak in another (ID verification).
We don't need a perfect solution that lasts forever. If it gets bypassed in 5 years, that's not an issue, we can just make something else. The issues are simple solvable UX and software development issues, not fundamental ones.@michael @kramse @jwildeboer No, it isn't a way to solve that, because it won't work & will create many more problems every bit as bad.
What will solve it is holding the platforms responsible & people like you insisting the users jump through hoops in a security theater instead is distracting from that.
Funny you should compare to US firearm problems because that, too, is about dancing ineffectually around the problem when a working solution is right there but corporations are against it.
-
@michael @kramse @jwildeboer No, it isn't a way to solve that, because it won't work & will create many more problems every bit as bad.
What will solve it is holding the platforms responsible & people like you insisting the users jump through hoops in a security theater instead is distracting from that.
Funny you should compare to US firearm problems because that, too, is about dancing ineffectually around the problem when a working solution is right there but corporations are against it.
@michael @kramse @jwildeboer I wish you could see whose work you're doing here.
-
@michael @kramse @jwildeboer No, it isn't a way to solve that, because it won't work & will create many more problems every bit as bad.
What will solve it is holding the platforms responsible & people like you insisting the users jump through hoops in a security theater instead is distracting from that.
Funny you should compare to US firearm problems because that, too, is about dancing ineffectually around the problem when a working solution is right there but corporations are against it.
In the gun analogy, you're on the side of no gun control at all. -
Then explain what won't work unless it's tied to a person's identity. Be specific.
it was not me saying it was easy, we dont owe you anything #sealion
-
@michael @kramse @jwildeboer No, it isn't a way to solve that, because it won't work & will create many more problems every bit as bad.
What will solve it is holding the platforms responsible & people like you insisting the users jump through hoops in a security theater instead is distracting from that.
Funny you should compare to US firearm problems because that, too, is about dancing ineffectually around the problem when a working solution is right there but corporations are against it.
@jwcph @michael @jwildeboer 100 percent agree with @jwcph here
-
There's absolutely ways to do it without id. At the simplest, issue everybody that's 18+ a certificate + key. The certificate can be issued without any identifying information. Have the site send a challenge to the user and have them sign that with their key and return the signed challenge + certificate. You've just proved they are 18+ without divulging any information and there is no risk for leaks at the site.
It's a little more complex than that because it is very easy to use somebody else's key/certificate and the certificate itself can be used as a pseudonymous identifier if used directly against the site.
This can be made decentralized (site decides which certificate issuers they trust) and can be made entirely offline.
Just because sites now require uploading a picture of your passport or most government age verification mandates require something similar, doesn't mean it isn't possible to make it secure.@michael Age verification is, in my opinion, labouring on the symptoms, while leaving the cause (platforms that due to lack of liability have put revenue over protecting minors) with consequences that go far beyond the "protect the children" mantra. It is like using a cannon to kill fly sitting on the church wall and with that taking the whole church down. @jwcph
-
In the gun analogy, you're on the side of no gun control at all.
if the solution ignores effectivity, and bad repercussions - like throwing anonymity away because of the children. It is NOT an acceptable solution.
Dont focus only on expected good, but how can it be abused. Do you want to trust all future politicians with THIS power, and what happens WHEN data is stolen, be practical
