Discord age verification last night happily told me that I appear to be a teenager.

[cmdrsprocket@mathstodon.xyz]

@cstross This beard is worth at least 20 Shekel!

[kryptykphysh@mastodon.kryptykphysh.xyz]

@cstross If only this might have been anticipated and avoided in some way.

[cstross@wandering.shop]

@lispi314 I suspect the on-device video-based age mechanism is broken because they'd like to drive people towards the upload-your-government-ID-documents option.

Not going to happen.

[temptoetiam@eldritch.cafe]

@cstross Teen-by-default policy is certainly a err... choice
https://discord.com/press-releases/discord-launches-teen-by-default-settings-globally

[oldcoder@dansu.org]

You're young at heart, I'm sure, and most likely walk with a spring in your step. Perhaps they've detected that.

[fuzzygroup@ruby.social]

@cstross May I point out that Peter Thiel and Palantir are one of the funders of their "age verification tech".

[cstross@wandering.shop]

@fuzzygroup This is my shocked face:

[craignicol@glasgow.social]

@cstross @otfrom https://youtube.com/shorts/xsj4VrRcyZs

[fallen_angela@tech.lgbt]

@cstross @fuzzygroup which they'd probably also categorise as a teenager

[rl761@social.vivaldi.net]

@cstross how long until the teenage / beardy face is in the next Discord third party verification data breach

[aadeacon@mastodon.social]

@cstross Sh, Sycophantic AI.

[cstross@wandering.shop]

@craignicol @otfrom That's a video. I don't do video. What does it say?

[jernej__s@infosec.exchange]

@cstross I used the bypass before they killed it luckily.

[craignicol@glasgow.social]

@cstross @otfrom it's a video that shows someone drew a face on their thumb, and used that for the discord id, and discord accepted it and said they were 12-15. There's a lot of other videos showing how easily it can be fooled.

[malcolm@sns.internationalotaku.com]

@cstross I suspect it's because they had an exploit to inject "yes this person is an adult" data from any server of your choice and the easiest way to fix that was, well, this.

[misusecase@twit.social]

@craignicol @cstross @otfrom According to my son, who is in elementary school, there’s a whole genre of YouTube videos about fooling Roblox age verification.

[craignicol@glasgow.social]

@MisuseCase @cstross @otfrom school kids have always been fantastic at subverting technical constraints. Anyone who knows anything about subverting tech would have seen this coming. Because when you throw up a gate on something that was previously accessible, the first thing anyone will do is climb the gate, not pay the toll.

[damonwakes@mastodon.sdf.org]

@cstross @fuzzygroup Discord: "Your shocked face appears to be that of a teenager."

[fooker@infosec.exchange]

@cstross ah well there's the issue. You tried to validate your age instead of saying "fuck this I'll use one the many other options, even though it will be a slight to major inconveniance to me". You just have to be more paranoid and have more free time on your hands in order to have the choices the "invisible hand" offers you. (Not sure if that deserves a /s or a /fuckthisdystopianworld)

[skry@mastodon.social]

@cstross I just saw this breakdown of the LinkedIn verification process, which exceeded all my expectations for invasiveness.

https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/