top 50 comments

sorted by: hot top controversial new old
[–] 290 points 1 year ago (73 children)

Government sets up page to verify age. You head to it, no referrer. Age check happens by trusted entity (your government, not some sketchy big tech ass), they create a signed cert with a short lifespan to prevent your kid using the one you created yesterday and without the knowledge which service it is for. It does not contain a reference to your identity. You share that cert with the service you want to use, they verify the signature, your age, save the passing and everyone is happy. Your government doesn't know that you're into ladies with big booties, the big booty service doesn't know your identity and you wank along in private.

But oh no, that wouldn't work because think of the... I have no clue.

  • source
  • hideshow 73 child comments
  • [–] 177 points 1 year ago (12 children)

    That sounds like a very functional and rational solution to the problem of age verification. But age verification isn't the ultimate goal, it's mass surveillance, which your solution doesn't work for.

  • source
  • parent
  • hideshow 12 child comments
  • [–] 86 points 1 year ago* (last edited 1 year ago) (9 children)

    The fact that they haven't gone for this approach that delivers age verification without disclosing ID, when it's a common and well known pattern in IT services, very strongly suggests that age verification was never the goal. The goal is to associate your real identity with all the information data brokers have on you, and make that available to state security services and law enforcement. And to do this they will gradually make it impossible to use the internet until they have your ID.

    We really need to move community-run sites behind Tor or into i2p or something similar. We need networks where these laws just can't practically be enforced and information can continue to circulate openly.

    The other day my kid wanted me to tweak the parental settings on their Roblox account. I tried to do so and was confronted by a demand for my government-issued ID and a selfie to prove my age. So I went to look at the privacy policy of the company behind it, Persona. Here's the policy, and it's without a doubt the worst I've ever seen. It basically says they'll take every last bit of information about you and sell it to everyone, including governments.

    https://withpersona.com/legal/privacy-policy

    So I explained to my kid that I wasn't willing to do this. This is a taste of how everything will be soon.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 10 points 1 year ago (6 children)

    The fact that they haven’t gone for this approach that delivers age verification without disclosing ID, when it’s a common and well known pattern in IT services, very strongly suggests that age verification was never the goal.

    I don't agree. It certainly makes it possible that it isn't the goal. But I genuinely believe that, at least here in Australia (where our recent age-gating law is not about porn, but about social media platforms, with an age limit of 16), the reason behind the laws being designed as they are is (1) optics: despite what those of us here say, keeping young children off of harmful social media algorithms is very politically popular and they wanted to pass a bill that banned it as quickly as they could. No time for serious discussion about methods. And (2) a complete lack of knowledge. Because they wanted the optics, they passed the bill extremely quickly and without a serious amount of consultation. And I don't trust that even if they had done consultation, they would have known who is more reliable to listen to, the actual experts and privacy advocates, or the big AI companies with big money promising facial recognition will somehow solve this. Because politicians are, by and large, really fucking stupid at technology.

    What is it they say? Never attribute to malice that which can be adequately explained by stupidity?

  • source
  • parent
  • hideshow 6 child comments
  • load more comments (6 replies)
  • load more comments (2 replies)
  • load more comments (1 reply)
  • [–] 65 points 1 year ago (3 children)

    ActivityPub is a major threat to the commercial social networks.

    These laws are purely a way to regulate communication, but they are effectively a way to prevent new social networks from becoming established.

    This is why the really big social networks are welcoming them with open arms. Even the criminal social networks are secretly pleased with them.

    Laws only affect people too poor to manipulate them and too honest to disobey them.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 1 year ago (2 children)

    I am sorry but much as I enjoy lemmy, activitypub is absolutely not a threat to anything. Mastodon and co had stagnant to declining user numbers ever since the last twitter exodus. And as things are, that just isn’t going to change and no amount of telling each other so in the mastodon and lemmy echo-chambers is going to change that.

    Worse, the open platforms could absolutely not handle massive growth. Moderation would be a nightmare. How many people are going to volunteer to look over the additional thousands of thousands of posts with gore, csam etc. And you would need a lot of them.

    Who’s going to pay for the legal advice that inevitably will be needed for the various situations that’d crop up if the network ever got enough users to be an actual threat? Donations? How well is that going to scale? How many volunteer hosters and admins would still be willing to do it in the face of all that?

    ActivityPub is a niche, and if you enjoy it, you should hope it stays that way, because it certainly wouldn’t survive mainstream.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (2 replies)
  • [–] 22 points 1 year ago* (last edited 1 year ago) (11 children)

    Age check happens via trusted entity (your government)

    Bold of you to assume a government entity is trusted. In the UK we have a large misrepresentative error due to our voting system.

  • source
  • parent
  • hideshow 11 child comments
  • [–] [S] 17 points 1 year ago

    The problem is that meat-space logic is applied to the cyberspace (as it might have been said in the 90ies).

    You go into a store and the clerk sees you and knows your age. If it's borderline, then they ask for ID. They are applying that thinking to internet services. And so are you. You are just trying to figure out a better way to ask for ID.

    The UK doesn't have a system of mandatory national ID. Brits feel that that is totalitarian. So obviously, they do not use the scheme you propose. It's not their meat-space logic.

    Where this falls down is that no ordinary Mastodon instance can comply with the regulations of the close to 200 hundred countries in the world. Of course, just like 4chan, many wouldn't want to out of principle.

    The only way to make this work is to introduce another meat-space thing: Border posts. You need a Great Firewall of the [Local Nation]. At physical border posts, guards check if goods comply with local regulations. We need virtual border posts to check if data is imported and exported in compliance with local regulations.

    Such a thing, a virtual Schengen border, was briefly considered in the EU about 15 years ago. It went nowhere at the time. But if you look at EU regulations, you can see that the foundations are already laid, most obviously with the GDPR but also the DSM, DMA, DSA, CRA, ...

    Eventually, the border will be closed to protect our values; to enforce our laws. We will lock out those American and Chinese Big Tech companies that steal our data. We will only allow their European branches and strictly monitor their communications abroad. We will be taking back control, as the Brexiteers sloganized it. Freedom is just another word for having to ask the government for permission when you enter a country. And increasingly, it is another word for having to ask permission for how you use your own computer.

    It won't be some shady backroom deal. Look here. People in this community love these regulations. Europeans here are happy to tell US companies to "FO if they don't want to follow our laws". Well, the Great Firewall of Europe is how you do that.

  • source
  • parent
  • [–] 16 points 1 year ago* (last edited 1 year ago) (2 children)

    I think this starts to not work when you start to include other states that want to do this, other countries, cities, counties, etc.. How many trusted authorities should there be and how do you prevent them from being compromised and exploited to falsely verify people? How do you prevent valid certs from being sold?

    Some examples of the type of service you mentioned:

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (2 replies)
  • [–] 11 points 1 year ago

    This can be improved even further to lock a single age verification to a single account. Instead of issuing you a generic signed cert, they use blinded signatures to sign a cert that you generate and encrypt, containing the domain name and your username. The govt never sees the site or your username, because it's encrypted, and the site never sees the document you provided the govt with to prove your age. But you have a cert that can only be used by you to verify your account is of age.

    There's an alternative solution that would enable a person's browser or device to verify their age based on a govt-signed cert with repeated hashes. This would have the benefit of the government not even knowing how many verifications you had done, because they only provide one cert per person (with longer renewals. The downside of this is that it requires some form of unique multiple-use identifier. In the sample question that's fine because it's a passport. IRL it could be something like an email address, or even just your own unique UUID.

  • source
  • parent
  • load more comments (32 replies)
    [–] 157 points 1 year ago (82 children)

    This is exactly the kind of government overreach people like me have been screaming about since, in my case, the 1990s.

    "I told you so" just doesn't feel so good when what's happening is nothing less than the entirety of human freedom and liberty is being eroded before our very eyes, and those who disagree with it get labeled as kooks, and accused of hating whatever "oppressed group" of the day is in vogue.

  • source
  • hideshow 82 child comments
  • [–] [S] 22 points 1 year ago (23 children)

    Yes. I had always worried about the copyright industry. That was the big money pushing for censorship. Controlling access and exchange of information is part of their business model and even personal ideology. But I don't know how much this has actually to do with them, and how much is simply the will to power.

    What I did not see coming at all was how the left would completely 180 on these issues. That, at least, I blame on the copyright industry.

    Right wing people have screeched about "the intolerant left" forever, but I always ignored the obvious hypocrisy. I took it as a debate on what is permissible in polite society. But now Europe is at a point where there is simply a consensus against free speech. Only the most illiberal forces will be able to use these legal weapons to full effect. That will be the extreme right.

  • source
  • parent
  • hideshow 23 child comments
  • [–] 13 points 1 year ago* (19 children)

    It's just a logical extension of what happens when government becomes the arbitrator of all.

    The biggest issue is that so many people see it just as you do, left vs right, instead of liberty vs authoritarianism.

    For decades, the libertarian movement, as seen by the left, has been largely associated with the right, simply because of their professed support of the free market, and dislike of gun control

    But that same movement has been seen by the right as largely associated with the left, because of their views on things like the drug war, enforced morality, and anti-corporatism.

    Has there been a large shift of alt-right into the libertarian movement over the past few years? Yes. Absolutely. And I despise it with a passion.

    But there are still quite a lot of us truly anti-authoritarian libertarians out there who despise both left, and right leaning authoritarianism.

    But when I bring up issues of authoritarianism, I get "BoTh SiDeS?!" bullshit responses. Because YES, as we can see, BOTH SIDES do their own fair share of this authoritarian bullshit.

    They differ in methods, yes. But the bottom line is an encroachment on personal privacy. Plus, property rights are just a logical extension of personal privacy rights.

  • source
  • parent
  • hideshow 19 child comments
  • load more comments (19 replies)
  • load more comments (3 replies)
  • load more comments (54 replies)
    [–] 88 points 1 year ago

    Hey, UK! When you are being compared to Mississippi, you are fucking up very very badly.

  • source
  • [–] 82 points 1 year ago (19 children)

    If you know anyone who support age verifications laws remind them that the same governments that care so much about kids is backing and arming israel to murder and starve kids to death.

  • source
  • hideshow 19 child comments
  • load more comments (15 replies)
    [–] 53 points 1 year ago (20 children)

    I live in the UK, and this is something I was saying about the Online Safety Act. It puts all the onus on the websites and not only do some websites not have the money or resources to comply, but with something like Mastodon, it doesn't really work. Like this bill was written and passed by people who don't know shit about fuck about tech. Several Lemmy and Mastodon instances have shut down/Geoblocked the UK because of this, and other jurisdictions don't seem to understand that either.

  • source
  • hideshow 20 child comments
  • load more comments (17 replies)
    [–] 47 points 1 year ago (1 child)

    I think that was the point. Not only decentralized services, but a lot of small and/or individual services too. The way age verification is done is both stupid, and expensive. Only the big names will remain.

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 43 points 1 year ago (1 child)

    We NEED to Protect The Children which is WHY we're SO LUCKY to have a President who is SO KEEN to PROTECT Child Rapists like Jeffrey Epstein and Ghislaine Maxwell!

  • source
  • hideshow 1 child comment
  • [–] 35 points 1 year ago

    “there is nobody that can decide for the fediverse to block Mississippi.” (...)

    “And this is why real decentralization matters,” said Rochko.

  • source
  • [–] 29 points 1 year ago (5 children)

    If it's a law, it should be free for both businesses and users.

  • source
  • hideshow 5 child comments
  • [–] 26 points 1 year ago* (last edited 1 year ago) (3 children)

    Lucky for Mastodon and other ActivityPub projects, they don't need to host any servers. People outside of regions where age verification is required can host the servers instead.

  • source
  • hideshow 3 child comments
  • load more comments (3 replies)
    [–] 22 points 1 year ago (5 children)

    I don't see how Mississippi or the UK think they can issue laws on sites hosted outside their jurisdiction. That's just mind boggling. The onus is on the state to provide age verification, or make their ISPs do it.

  • source
  • hideshow 5 child comments
  • load more comments (2 replies)
    [–] 13 points 1 year ago

    If a government wants this in place, they should also facilitate the means.

  • source
  • load more comments
    view more: next ›