Discord age verification last night happily told me that I appear to be a teenager.

[aadeacon@mastodon.social]

@cstross Sh, Sycophantic AI.

[cstross@wandering.shop]

@craignicol @otfrom That's a video. I don't do video. What does it say?

[jernej__s@infosec.exchange]

@cstross I used the bypass before they killed it luckily.

[craignicol@glasgow.social]

@cstross @otfrom it's a video that shows someone drew a face on their thumb, and used that for the discord id, and discord accepted it and said they were 12-15. There's a lot of other videos showing how easily it can be fooled.

[malcolm@sns.internationalotaku.com]

@cstross I suspect it's because they had an exploit to inject "yes this person is an adult" data from any server of your choice and the easiest way to fix that was, well, this.

[misusecase@twit.social]

@craignicol @cstross @otfrom According to my son, who is in elementary school, there’s a whole genre of YouTube videos about fooling Roblox age verification.

[craignicol@glasgow.social]

@MisuseCase @cstross @otfrom school kids have always been fantastic at subverting technical constraints. Anyone who knows anything about subverting tech would have seen this coming. Because when you throw up a gate on something that was previously accessible, the first thing anyone will do is climb the gate, not pay the toll.

[damonwakes@mastodon.sdf.org]

@cstross @fuzzygroup Discord: "Your shocked face appears to be that of a teenager."

[fooker@infosec.exchange]

@cstross ah well there's the issue. You tried to validate your age instead of saying "fuck this I'll use one the many other options, even though it will be a slight to major inconveniance to me". You just have to be more paranoid and have more free time on your hands in order to have the choices the "invisible hand" offers you. (Not sure if that deserves a /s or a /fuckthisdystopianworld)

[skry@mastodon.social]

@cstross I just saw this breakdown of the LinkedIn verification process, which exceeded all my expectations for invasiveness.

https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/