Comment by ryandrake
5 hours ago
My kid has recently just quit playing Roblox because of the sketchy facial age check process. She said that her and all her friends know not to ever upload a picture of themselves to the Internet (good job, fellow Other Parents!!) so they're either moving on to other games or just downloading stock photos of people from the internet and uploading those (which apparently works).
What a total joke. These companies need to stop normalizing the sharing of personal private photos. It's literally the opposite direction from good Internet hygiene, especially for kids!
One aspect of this normalization of photo uploading is that, if a platform allows user-generated content that can splash a modal to kids, a bad actor can do things like say “you need to re-verify or you’ll lose all your in-game currency, go here” and then collect photo identification without even needing to compromise identity verification providers!
I truly fear the harm that will be done before legislators realize what they’ve created. One only hopes that this prevents the EU and US from doing something similar.
The fundamental question that needs answering is: should we actually prevent minors below the age of X from accessing social media site Y? Is the harm done significant enough to warrant providing parents with a technical solution for giving them control over which sites their X-aged child signs up, and a solution that like actually works? Obviously pinky-swear "over 13?" checkboxes don't work, so this currently does not exist.
You can work through robustness issues like the one you bring up (photo uploading may not be a good method), we can discuss privacy trade-offs like adults without pretending this is the first time we legitimately need to make a privacy-functionality or privacy-societal need trade-off, etc. Heck, you can come up with various methods where not much privacy needs trading off, something pseudonymous and/or cryptographic and/or legislated OS-level device flags checked on signup and login.
But it makes no sense to jump to the minutiae without addressing the fundamental question.
> The fundamental question that needs answering is: should we actually prevent minors below the age of X from accessing social media site Y?
I suspect if you ask Hacker News commenters if we should put up any obstacles to accessing social media sites for anyone, a lot of people will tell you yes. The details don't matter. Bashing "social media" is popular here and anything that makes it harder for other people to use is viewed as a good thing.
What I've found to be more enlightening is to ask people if they'd be willing to accept the same limitations on Hacker News: Would they submit to ID review to prove they aren't a minor just to comment here? Or upvote? Or even access the algorithmic feed of user-generated content and comments? There's a lot of insistence that Hacker News would get an exception or doesn't count as social media under their ideal law, but in practice a site this large with user-generated content would likely need to adhere to the same laws.
So a better question might be: Would you be willing to submit to ID verification for the sites you participate in, as a fundamentally good thing for protecting minors from bad content on the internet?
4 replies →
> The fundamental question that needs answering is: should we actually prevent minors below the age of X from accessing social media site Y?
This is only an interesting question if we can prevent it. We couldn't prevent minors from smoking, and that was in a world where you had to physically walk into a store to buy cigarettes. The internet is even more anonymous, remote-controlled, and wild-west. What makes us think we can actually effectively age gate the Internet, where even Nobody Knows You're A Dog (1993)[1].
1: https://en.wikipedia.org/wiki/On_the_Internet,_nobody_knows_...
2 replies →
The real solution, IMO, is a second internet. Domain names will be whitelisted, not blacklisted, and you must submit an application to some body or something.
9 replies →
Nice job of sidestepping the "fundamental question" of whether that can be done and what damage it would do. You do not get to answer the question as you posed it in a vacuum.
It's not a "robustness issue". Nobody has proposed anything that works at all.
But to answer your "fundamental question", no. Age gating is dumb. Giving parents total control is also dumb.
Can we actually prevent children under 16 from buying beer?
2 replies →
It's never been about porn. By marking certain part of the internet "adult-only" you imply that the rest is "family-friendly" and parents can feel less bad about themselves leaving their children with iPads rather than actually parenting them, which is exactly what Big Tech wants for obvious reasons. If I had a child I'd rather have it watch porn than Cocomelon, which has been scientifically developed so that it turns your child's brain into seedless raspberry jam. Yet nobody's talking about the dangers of that, because everyone's occupied with <gasp> titties.
2 replies →
> I truly fear the harm that will be done before legislators realize what they’ve created.
Not defending the legislation as I overwhelmingly disagree with it, but if I recall, I don't think any of the age verification legislation specifies a specific implementation of how to verify age.
Requiring photos, or photo ID, or any other number of methods being employed, were all decided on by the various private companies. All the legislators did is tell everyone "you must verify age." The fault here is on Roblox as much as it is on the legislature and they should equally share blame.
How would you suggest they verify age? I am not aware of a good way to do it from a privacy and security perspective.
7 replies →
I’m sorry to say that a number of US states have instituted age verification laws over the past year
Aka, morality laws mostly.
i call this slipstreaming, it can even occur during the signup yeah, once the bouncing around to many domains / uploading photos is psychologically normalized havoc can ensue. this is the greater evil.
I'm optimistic actually. I think "Gen Alpha" is gonna be alright and sufficiently wary of Internet sharing and privacy. Unlike the previous few generations, esp. Milleneals and to a somewhat lesser extent Gen Z and Boomers, who have massively over-shared and are now reaping some of the horrible harvest that comes from that oversharing. Today's teens and tweens seem to finally be getting the message.
I also actually think AI might be a savior here. The ability to fake realistic 18+ year old selfies might help put the nail in the coffin of these idiotic "share a photo with the Internet" verification methods.
I otherwise agree with what you're saying, but I think the ratio of conscientious people has fluctuated over time across all generations. It has more to do with what year it is than how old they are.
> These companies need to stop normalizing the sharing of personal private photos. It's literally the opposite direction from good Internet hygiene, especially for kids!
While I agree with you entirely, it's important to remember that these companies want to mis-educate the masses (and especially children) against their own interest. It's not just unfortunate that they're normalising uploading a photo just to play a videogame: it's an intentional choice to de-normalise privacy and normalise deeper and more in-grained online stalking.
Most of these companies don't even want to add age gates. They get in the way of their normal predatory marketing schemes, the little bits of extra data isn't worth it.
Stupid laws are forcing these companies to implement something. In most countries, there is no privacy-preserving way to verify that you're old enough digitally, so when these companies are forced to get something good enough going, they're going to go with the cheapest offer they can legally get away with.
Governments know this. They want certain websites to disappear entirely, and for certain platforms to just stop existing. Both sides are using weaponised incompetence to blame the other and users end up losing regardless of whose fault it is.
My kids also know that as far as the internet is concerned, their date of birth is 1 January 1970.
Having to manage my kids online accounts have been a nightmare. So many different rules, with arbitrary age limits on things that go completely against my own rules for what my kids can do at different ages, with weird methods for linking or verifying or sharing/transferring purchases. I have gotten so frustrated trying to get accounts set up so we can play together.
There seems to be a big movement (UK specifically) from governments using age gateing as an excuse to increase surveillance and online tracking. I don't know where Roblox is based or it's policies, but it's likely they are just implementing what the government has forced them to do.
We need to push back against governments that try and restrict the freedom of the internet and educate them on better regulations. Why can sites not dictate the content they provide, then let device providers provide optional parental controls.
Governments forcing companies to upload your passport/ID, upload pictures/videos of your face, is dangerous and we are going to see a huge increase of fraud and privacy breaches, all while reducing our freedoms and rights online.
IMO it should not be hard for large services like Roblox and Instagram to get together with device makers to come up with a sensible solution.
When you create a new profile on Netflix you mark it as "kids" and voila. Devices should have kid profiles with lots of sane defaults. The parent profiles have a thorough monitoring and governance features that are dead simple to use.
As always it's not perfect but it will go a long way. Just getting a majority of parents on sane defaults will help unknot the broader coordination problems.
I see lots of claims about governments using age gating to "track" people, but no evidence. Your last point about uploading ID documents to random online services (which i agree is a privacy risk) would be solved with a government digital ID.
That is never going to happen it seems, as -- in the UK at least -- people go crazy whenever it is mentioned. Despite "the government" having the ability to track whatever they wanted already, should they care to.
Age gating discussions always devolve into some fantasy land were people are arguing for children to have access to porn and other inappropriate material, and happily construct some straw man where age gates lead to censorship for everyone.
If your government wanted to censor the internet they can do it without age gates. As a parent I am happy to have society agree on some basic rules around what children can do online, as there are rules on what children can do in the real world.
Yes, I know all the come back arguments about how it is my responsibility as a parent. Don't worry, I will be responsible for what my children do online when they are older. But in the end a society raises children, and society should agree a limit on what children can be exposed to online.
The funniest case I've seen was somebody fooling one of these tools using Gmod by playing with the face sliders of those stock Half-Life characters.
I think the way Roblox is doing right now separating the users in age groups just makes it easier for predators to find victim.
Governments and corporations are never interested in protecting children - they don't vote, and they don't have money. So making it "easier for predators to find victims" is not a failure of the policy.
> She said that her and all her friends know not to ever upload a picture of themselves to the Internet (good job, fellow Other Parents!!)
it's a video game, it's an aesthetic experience, if uploading a photo of yourself doesn't feel good, it's valid to say, it's a bad game or whatever.
but by some more objective criteria, this photo upload thing that you are saying doesn't really matter. they are uploading photos of themselves to the Internet all the time (what do you think Apple Photos is). of course, with kids, i can understand the challenges of making nuanced guidelines, but by that measure, it's simpler to just say, playing roblox is kind of a waste of time, or suggesting better games to play, rather than making it about some feel-good nonsense i'm-a-savvy-Internet-user rule. it's what this whole article is about, providing real answers, but who under 18 years old is going to read the whole thing?
> they are uploading photos of themselves to the Internet all the time
I worried about this at first, too. But I also check, like a good parent. And to my surprise my kid already learned on her own how to mask/blur faces and even details about the inside of her room when sharing photos. And her friends do, too. They are surprisingly savvy about Internet privacy and risks for their age--certainly more cognizant of the dangers than my generation was growing up with the Wild West Internet.
[flagged]
Age verification on mainstream porn sites does absolutely zilch against teenagers accessing porn. There are countless other ways of obtaining porn. Even DDG with the safety off will provide plenty of it.
>it might prevent that
On the global internet... good luck with that.
Oh, they'll ban us from looking at other countries net's soon enough for our safety.
>and this seems like it might prevent that
sorry but we're on the internet. You can type the literal words 'hardcore pornography' into any search engine of your choice and find about fifteen million bootleg porn sites hosted on some micro-nation that don't care about your age verification.
In fact ironically, this will almost certainly drive people to websites that host anything.
What evidence led you to believe this, when controlling for heritability?
How about that 38% of young women in the UK have experienced asphyxiation; combined with studies showing there is zero safe threshold without brain damage markers in the blood?
https://www.bbc.com/news/articles/c62zwy0nex0o
https://www.theguardian.com/society/2025/nov/18/sexually-act...
https://wecantconsenttothis.uk/blog/2020/12/21/the-horrifyin...
https://www.nytimes.com/2024/04/12/opinion/choking-teen-sex-...
https://www.psychologytoday.com/us/blog/consciously-creating...
https://www.itleftnomarks.com.au/wp-content/uploads/2024/07/...
Before the widespread adoption of pornography, this rate was near 0%. Now we have literally a significant minority of women with permanent brain damage, induced from widespread pornography, unknown harms long-term, and studies already suggesting increased risk of random stroke decades afterwards.
17 replies →
I was getting a haircut last week and chatting about our kids with the stylist, who said (basically): "I just started letting my 7 year old on Roblox. I know its full of pedophiles. I told him to come to me or his older brother if anyone tries to talk to him."
If the million reports of Mark Zuckerberg enabling pedophiles and scam artists haven't made it clear, the executives of these tech companies just don't care. They will sell children into sexual slavery if it improves next quarter's numbers.
The drip-feed of mindless brain-rot, micro-payments, and cyber-bullying should be much higher up the list of reasons for not letting a 7 year old use Roblox (and YouTube and FaceBook and…)