662
Hackers Expose The Massive Surveillance Stack Hiding Inside Your “Age Verification” Check (www.techdirt.com)
submitted 6 months ago by to c/technology@lemmy.world
29 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 42 points 6 months ago* (6 children)

This is ridiculous and clearly shows both nefarious intent and complete disregard for the GDPR and it's core principle of data minimisation. There must be a simpler solution to this - maybe through attestation from a trusted third party who has already (legitimately) verified the user's identity - like a bank. Imagine a user creating and providing a token that allows a one-time request through the open banking standards to receive an attestation on whether or not the user is over 18 - without disclosing the users actual dob or any other personal information except who and how the attestation was made. Not sure if it would even be necessary for companies to store precisely when the attestation was made if the banks themselves record the event.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 32 points 6 months ago

    I have posted this a few times before.

    Somehow everyone has forgotten about parental controls that have been apart of consumer grade home routers for years.

    Parental controls are there specifically to help parents. These settings allow a parent to block everything online only allowing access to "approved lists" of websites, generaly done through a "whitelist" of approved websites.

    What is missing at a government level is a "curation effort" of websites, similar to Libraries that classify books by genres and appropriate age levels.

    I would propose a government fund where Librarians or similar organizations can start this effort, and make these lists easily accessible within routers for non tech individuals, together with local initiatives and programs for parents that have a interest to learn more.

    For power users, lists like these already exists curated by public individuals very similar to pihole block lists and whitelists.

    This concept would be the most privacy respectful IMO giving parents the most power to parent, while respecting everyone else's privacy online including children.

    But we all know this is not about "protecting the children", but really about mass surveillance for the public at all age groups, and yet this topic keeps coming up.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 19 points 6 months ago (3 children)

    Yeah, steam determines that someone is an adult if they have a credit card on their account. This seems like a simple and effective method. Although I do still sometimes have an 'Are you over 18?' query, maybe that's from individual games.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 5 points 6 months ago (2 children)

    good example that works well on a data minimisation basis when they the need is for some indication of age appropriated trust. There are limits to it though. - to actually satisfy age-gates/verification they would also need to tie your identity to the ownership of the card, and ensure the card isn't some kind of under 18 prepaid affair.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 11 points 6 months ago (1 child)

    Prepaid cards have numbers that identify them.

    If we imposed rules that only adults can use regular cards and kids can use the equivalent of a child card, which is available at all major card issuers, this entire problem could be solved by the banks that already use KYC for basically the same reason.

    But that wouldnt get us closer to palantirs one world government so it isnt an option

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 5 points 6 months ago

    Prepaid cards have numbers that identify them.

    Which, btw, makes perfect sense. As a shop that takes credit cards, I would want to know if someone has signed up for a subscription service with a prepaid card, since the card may run out, prematurely cancelling the service.

    There's a big database at the backend of the credit card processor that keeps track of all this stuff. The shop can tell a lot about you based on your card number.

  • permalink
  • fedilink
  • source
  • parent