We all know "proof of age" or "age verification" is synonymous with mass surveilance, but the words "proof of age" were cleverly choosen so the average person considers it the same as showíng another person a driver's license. Unecessary or otherwise it's only a minor inconvenience. And there is no harm to privacy.

So what should we call "proof of age" or "age verification" which is just as punchy, but communicatee the real intent? How can we subvert this attack on our rights by turning these twisted words against themselves?

top 32 comments

sorted by: hot top controversial new old
[–] 24 points 1 year ago

How about "privacy violation"?

  • source
  • [–] 15 points 1 year ago

    De-anonymizing

  • source
  • [–] 32 points 1 year ago

    Censorship by stealth.

    .. because that's what it amounts to.

    Platforms will start making their content "acceptable" to the "general consensus" (ie. right wing bible bashing hetero caucasians) in order to allow general access to content.

    "Unsuitable" material, like sex education, domestic violence advice, sexual orientation and religious freedom will "vanish" from the internet, just like it already is across the platforms run by USA billionaires.

    Those who fail to comply will be taken to court and those too small to fight will close down their internet presence.

    The credit card companies are already doing this for anyone who sells anything they don't like.

    This current wave is just more of it.

    It has absolutely nothing to do with keeping children safe, and everything to do with control.

  • source
  • [–] 11 points 1 year ago (2 children)

    Adult Action Surveillance and Recording.

  • source
  • hideshow 2 child comments
  • [–] 10 points 1 year ago (1 child)
  • [–] 7 points 1 year ago

    A waste of time

  • source
  • an intrusion and overstep by the usual suspects doing their usual bullshit

  • source
  • [–] 23 points 1 year ago*

    Identity theft. Because it is: they will steal your identification data and sell it to the highest bidder.

  • source
  • [–] 6 points 1 year ago

    State malware

  • source
  • [–] 6 points 1 year ago

    identity depositing

  • source
  • [–] 6 points 1 year ago
    [–] 5 points 1 year ago

    Humans abusing other humans. A tale as old as time itself.

  • source
  • [–] 5 points 1 year ago

    Script-search, presumption of age, kid-sniffing and self-snitching.

  • source
  • [–] 5 points 1 year ago
    [–] 3 points 1 year ago

    verificAGEtion

  • source
  • [–] 4 points 1 year ago
    [–] 2 points 1 year ago

    user doxing

  • source
  • surveillance

  • source
  • [–] 0 points 1 year ago* (10 children)

    We all know “proof of age” or “age verification” is synonymous with mass surveilance

    Is it? I was under the impression that websites would use private identity verification companies like iDenfy to perform age verification. The identity verification company would need to use a government API to verify the person's existence and age, but this doesn't necessarily mean that the identity verification company is reporting to the government which people have initiated age verification, or for which websites.

  • source
  • hideshow 10 child comments
  • [–] 9 points 1 year ago* (9 children)

    but this doesn't necessarily mean that the identity verification company is reporting to the government which people have initiated age verification, or for which websites.

    Oh sweet summer child.

    Unless it's designed to not be capable of doing it (its not), they are doing it and it's the intended plan.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 3 points 1 year ago (7 children)

    In the EU the legal framework requires a ZKP implantation. Laws would be broken if traceability was introduced.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 2 points 1 year ago (3 children)

    what prevents you from leaking your token on the internet, so everyone can use it? it has to be revokable somehow. to be revokable it has to be correlatable, so you can tell where the same token is used across multiple sites. which leads to easy deanonymization.

    ZKP is window-dressing. it's still a major privacy intrusion. don't fall for it.

    (also, it paves the way for lgbt issues, sex ed, harm reduction and activism to be censored behind the 18+ barrier, but that's a different matter.)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 year ago (2 children)

    You have to trust someone.

    And I can’t speak for all the implementations around the world. But I can speak for the Danish one. Or at least what the design is intended to be right now.

    The Danish verification tokens are single use. Yes they get checked against a database, centrally, but that database doesn’t hold any information about who the token was issued to, just whether it’s a valid token that hasn’t been used before.

    So your digital wallet holds a set of single use tokens. You have to log in using MitID (central government system for proving your identify online), then your wallet is issued age proofing tokens which you then hand over to the website to prove your age.

    So there are a million ways that COULD be abused, just like there are a million ways your bank could abuse the information it holds about you. In both cases, laws require that neither abuse their privilege.

    You have to trust someone. Or live a hermit.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago*

    this is sounding sketchier and sketchier. so every website that serves 18+ content in Denmark will need to check tokens against a central database upon login? forget censorship and surveillance, that sounds like it plain won't scale well. also does Denmark really expect every website to implement this? what about Lemmy or other fediverse services?

    why is this needed at all? why not just use parental controls on devices? why is this such a crisis now, for the first time in 20 years?

    I feel like they could just, you know, not do this.

  • source
  • parent
  • [–] 1 point 1 year ago* (last edited 1 year ago)

    I wouldn't call that an ideal implementation, but if they implemented it properly, there's no way for the website to know who you are, and there's no way for the website to tell the authority you visited their site. If there is, it's not actually a ZKP and it's a failure of the technology (and I assume at that point be against the law). The only abuse that should ever be possible is that the authority knows you are using tokens, not where.

    The only required trust that should be needed, is that the authority proved your age in the first place, such as when you get your drivers license, and that they actually implemented all the cryptography properly (which a 3rd party could verify)

    Edit: And if there's concern about token sharing somehow, it should be locked behind your biometics in a way that again doesn't leak any information, which they saw you encode when they verified your identity.

    Edit: think something like a programmable credit card with a key that can't be removed, but the card can be programmed with an age by the authority and locked by a biometric. You go in, plug the card in, they add the age and their part of the key, you scan your fingerprint on it, and then you're done. They never see your key. You then use it anywhere it's needed and it never goes back to the central authority. Give it a limited lifespan so it has to be renewed once a year or something.

  • source
  • parent
  • [–] 2 points 1 year ago* (2 children)

    Well that's awesome. I had heard Germany did a ZKP solution, I didn't realize it was EU law.

    I don't really expect anywhere but the EU to do that though. ZKP are really the only way to do it if it's going to be done.

  • source
  • parent
  • hideshow 2 child comments