← Back to context

Comment by vorpalhex

3 days ago

Can age assurance be done privately and anonymously? Absolutely.

But the entire point of age laws is to stifle free speech and ruin privacy. Thus why every age law requires uploading an ID.

If it was just age, just require a credit charge of a $1 through an intermediary. Good for a year or whatever.

> the entire point of age laws is to stifle free speech and ruin privacy

Does it? I mean sure, it's a side-effect that some (most?) politicians might find desirable, but there's also people who just want to restrict access to adult material (not taking a position on whether it's a good or bad thing here). Most parents would probably agree with the latter even if they don't with the former.

  • Yes. Look at the UK - in the best case the laws here (OSA) are absolutely trivially bypassable by apps that are openly advertised on the App Store (VPN apps). In the worst case it pushes people onto sites that refuse to comply which are likely holding _actually_ harmful material.

    > there’s also people who want to restrict access to adult material

    First of all - we’ve been down this path so many times. Won’t someone think of the children is a plea to emotion not to reason. Secondly, there are many ways that people can opt in to those controls already, and for the most part _they work_. Anyone who can bypass those will be able to bypass what’s being rolled out around the world. Lastly; they’re trivially bypassable because a grown up can validate and then just hand the device back to a child.

    The UK is pretty good at digital services and had a solid opportunity to make an anonymous, privacy first based age verification system. I designed one (not without flaws) in about 15 minutes, so we definitely could have had something decent. Instead our first move was to make something that basically required a liability shift, and we ended up sending face scans and passport photos to US tech giants - meanwhile the kids were just pointing their cameras at YouTube videos of adults and bypassing the filters.

  • Is there anyone who can't do this today? Adult websites self label, and both your router and ISP offer removing adult websites as an option.

    If your kid is going to get around that by clever vpn use, age gates don't help.

    • I don't have any children myself, but as I understand it in the modern age:

      Your kid's smartphone can connect to home wifi, mobile data, public wifi, and friends' home wifi - so network filtering alone won't cut it. And 'Encrypted SNI', 'DNS over HTTPS' and Cloudflare makes network filtering much harder than it was 15 years ago.

      On top of that, there's loads of porn posted on Reddit, Twitter, Twitch and suchlike. So any effective block is going to have a lot of collateral damage.

      2 replies →

    • > If your kid is going to get around that by clever vpn use, age gates don't help.

      I think politicians and their supporters believe they do help. Of course from their perspective the only way to know for sure is to implement the restrictions (regardless of whether they succeed, at least they fulfill their campaign promises to their electors of "doing something").

    • > Adult websites self label

      Not social media sites. Sites like Reddit are everything. Some also go out of their way to hide certain information from parents.

      Reddit (not to be too picky) does some weird things when a logger is in place, essentially making it impossible to know which subreddit is being accessed.

      And that's really where the bad stuff lurks - it's peer to peer interactions.

  • While some people may want that, everyone who has the technical know-how to restrict access can name probably a dozen different ways to do it without violating privacy via ID Upload. The only reason to push for ID Upload instead of the other methods is because policy makers are lazy and information resellers want as much information about us all as they can get. Its lazy because it just recreates the liquor store "Can I see your ID please?" experience everyone is so familiar with and takes no explanation, so lazy policy makers find it easy to push for, without accounting for how that data is handled after use. Meanwhile information clearing houses and anti-privacy wanks are salivating at how this can be leveraged so they too push the "ID Upload is the only way!" messaging.

    • >and information resellers want as much information about us all as they can get.

      That seems implausible given that most sites requiring age verification outsource it to some third party, which means they're not getting all the juicy biometrics.

      3 replies →

> But the entire point of age laws is to stifle free speech and ruin privacy. Thus why every age law requires uploading an ID.

The age verification system currently undergoing large scale field trials in the EU does not require uploading ID. Every member of the EU is required to support that system, and any online age verification laws any member passes are required to allow its use.