21
Could online age verification be done in a way that protects privacy and autonomy? (lemmy.world)
submitted 5 months ago* (last edited 5 months ago) by to c/ask_experienced_devs@programming.dev
53 comments fedilink hide all child comments
 

Apologies if this isn't the right place to ask this, but I thought actual developers with a deep understanding of how technology actually works would be the people to ask!

If you were tasked with setting up a safe and secure way to do this, how would you do it differently than what the UK government is proposing? How could it be done such that I wouldn't have to worry about my privacy and the threat of government suppression? Is it even theoretically possible to accomplish such a task at such a scale?

Cheers!

EDIT: Just to be clear: I'm not in favour of age verification laws. But they're on their way regardless. My question is purely about the implementation and technology of the thing, rather than the ethics or efficacy of it. Can this seemingly-inevitable privacy hellscape be done in a non-hellscapish way?

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 5 months ago (4 children)

You’d need to demonstrate that age verification protects groomers v children

All I need to show is that groomers can use the tools to distinguish between adults and children. The California law requires your OS announce your age to a "developer" before downloading an "application". The way the law is crafted, though, "developer" = "web server", and "application" = "web page".

Furthermore, the way the law is written, groomers aren't just allowed to get your age; they are required to get your age if they offer web services to Californians.

The majority of parents aren’t savvy enough, aware of, or have the time to use the tools.

You'd be hard pressed to find an adult who was successfully isolated from pornography as a minor. From that, we can conclude that the overwhelming majority of children aren't actually harmed by porn. Quite the contrary, instilling the idea in them that seeking pornography is somehow sinful or disobedient is quite harmful on multiple levels. But I digress...

The fact that fucking everyone has seen porn before their 18th birthday --without harm-- demonstrates that the overwhelming majority of kids don't actually need the tools. You see parents not using the tools as not knowing they exist or how to use them; I see parents trusting their kids. I see parents feigning ignorance of such tools in order to keep puritanical nitwits off our backs.

The most common way for parents to try to protect children is prohibition…and we know that prohibition puts kids more at risk. This isn’t an edge case…this is well meaning parents putting their children in danger because they don’t understand the realities of danger. Again…draconian prohibition is currently the most common strategy - that’s what I’m talking about. These parents most often the same parents who want to restrict sex education in schools, by the way.

No, that puts fewer kids at risk. Only the kids of those draconian parents are put at risk by those prohibitions. Age verification expands that to every kid. You've got the test backwards.

While those draconian parents are putting their kids at risk, their normal peers are inoculating them with sanity. Expand their insane bullshit to the rest of society, and that sanity is replaced with puritanical dogma.

You’re creating this straw man scenario where children are broadcasting their age publicly…that’s not really a thing.

Read the California law. That is a thing, effective January 1st, 2027. There are provisions against requiring data for other purposes or giving it to third parties, but those provisions require first-party groomers to have their webservers collect that data on every page load.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 5 months ago (3 children)

    I see, yes, you’re reacting to specific family of regulations that I already criticized earlier in this thread. Just like I don’t think putting it on on the parents is a good thing, I don’t think having companies regulate themselves is a good thing. This is what I was talking about when I said I don’t believe we should take an approach that protects companies profits.

    The alternative to self-regulation isn’t to just give up (put it in the parents hands) - it’s to have a multi pillared approach that includes everything that works, including (but not limited to) education, user tools, age gating etc. But that’s basically what we’re doing now…and instead of coming up with a comprehensive plan to regulate data at the source…we’re putting in a patchwork of company friendly virtue signals that make us less safe at the end of the day. Again: removing consumer age-gating and replacing it with nothing is a bad idea.

    Nah, I have it exactly right. The current model is primarily prohibition and nothing for the rest of us….that’s very dangerous. Your fear mongering scenario isn’t a thing. You’re speaking as if all children must publicly announce their age…when you know very well that’s not how the laws function. You’re arguing that if it’s possible for groomers to get the data…then it’s not worth getting the data at all. Meanwhile I’m reality the groomers require an additional step that any system would be vulnerable to. Certainly the groomers are much happier if you win your case and we do nothing…then they have access to every kid with the exception of the few savvy parents who can use the tools effectively.

    You’re not making an argument I can take seriously. You can’t just call every company who collects data a groomer, that’s absurd. As I said before…you need an actual groomer working within the system…and groomers are much happier working without a system than with one. 

    I completely agree that the law is lazy and doesn’t put enough oversight or privacy safeguards in place. I don’t agree that returning the internet to an unregulated hellhole with only user tools is the answer.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 5 months ago (2 children)

    The alternative to self-regulation isn’t to just give up (put it in the parents hands)

    Putting it in the parents hands isn't "giving up". That's where the responsibility should be. There is no other entity capable of performing this task without undue invasion of privacy.

    it’s to have a multi pillared approach

    This isn't a case where throwing everything at the problem makes it better. It doesn't. Every effort we take is another invasion into our privacy; into the privacy of children. Everything we do makes the privacy problem worse, and most of what we can do will also make it easier to identify and target children for additional harm.

    Again: removing consumer age-gating and replacing it with nothing is a bad idea.

    We aren't "removing" anything. Consumer age gating does not exist. It has never existed. It never needs to exist. Age gating isn't just virtue signalling. Age gating is actively enabling harm.

    The current model is primarily prohibition and nothing for the rest of us….that’s very dangerous.

    The current model is not "prohibition". The current model is "parental supervision".

    You’re arguing that if it’s possible for groomers to get the data

    No. I'm arguing that groomers are now required to collect the data. We used to be able to prosecute suspicious people for needlessly invading the privacy of others. With the current crop of laws, we require them to identify children.

    You can’t just call every company who collects data a groomer,

    Strawman. I didn't claim that. What I claimed is that every groomer who happens to provide a web service to Californians will be required to collect children's age data as of January 1, 2027.

    I don’t agree that returning the internet to an unregulated hellhole with only user tools is the answer.

    Supplanting user tools with centralized regulation is exactly what made the internet a hellhole.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 5 months ago (1 child)

    If you believe parents are the only people who can help…then I’m glad you’re not in charge because that would doom us. As I said above…most parents aren’t savvy enough or don’t have the time. If parents could be the solution…it would have been solved already.

    Yes, I get it…you’re saying that the groomers are the people collecting that data. Simply not true, like it or lump it those terrible laws will help…even if they’re a terrible invasion of privacy and don’t go far enough in some respects. I’m sorry, I can’t engage with somebody so wildly out of touch any more. I’m a front line worker in at risk children…and poor and at risk children…the children who are majority of children groomed…would be left out in the cold by your simplistic approach.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 5 months ago* (last edited 5 months ago)

    If you believe parents are the only people who can help

    Parents (and persons serving in loco parentis: guardians, caregivers, etc.) are the only ones who can responsibly impose on the privacy rights of a child. The government needs a warrant to do the same. Society in general includes the pornographers and groomers and others who would do harm to the child, and cannot be broadly trusted with such a responsibility. Any solution for a particular child has to pass through the parents/guardians of that child. The parents/guardians must be the ones implementing it, and they should only be allowed to implement it for their own children/wards. You indicate later that you work with at-risk kids; you might be considered a "guardian" of those kids, and you would be charged with providing this role to your kids. But not to society in general.

    Yes, I get it…you’re saying that the groomers are the people collecting that data. Simply not true,

    You have yet to read or fully comprehend the California law (in particular) if you're making that claim. Go back and read it. When you do, remember that groomers will be making "applications". Some of the developers receiving "age signals" from childrens' operating systems will be groomers. Re-read the law again, but this time substitute "groomer developer" for "developer", and "groomer application" for "application". This law explicitly requires groomer-developers to collect this data.

    poor and at risk children…the children who are majority of children groomed

    Violating everyone's privacy is not a replacement for properly supervising children. The poor and at risk kids you're talking about shouldn't exist: Their needs should be properly met, so that nobody is "at risk". Age verification doesn't do anything to help at-risk kids. It does make it easier for groomers to identify them as at-risk kids.

    Australia adopted age restrictions on social media. They found that the net effect of their ban was to isolate at-risk kids from support. Kids felt compelled to hide their internet activities from adults and authorities. The act of reporting abuse also served to incriminate the kid for bypassing the bans, so kids tend to conceal both. Their ban is introducing greater harm.

    You're not helping kids by supporting these laws. You're putting them at greater risk. As a "front line worker in at risk children", you really should know better.

  • permalink
  • fedilink
  • source
  • parent