We the people need to write to our mps that we oppose this attack on privacy.
post
I think with recent news of the data leak of Alberta voters information, it goes without saying that age verification, and the data leak that will follow, is part of the design.
https://www.cbc.ca/news/canada/edmonton/livestory/elections-alberta-electors-list-9.7182971
Lmao, what a waste of tax dollars. Like, it's been a complete failure in the other countries that have lobotomized themselves and done it - yeah we should do it too! What could possibly go wrong?
...idiots
So much for the liberals not banning porn like the conservatives wanted to lmao
So at this point I guess there's no point in Manitoba implementing this. There's no use in the province going through all the work and doing all this when the federal government is going to do it anyway
If we thought the recent explosion of scams was bad enough, oh boy are we in for a rude awakening after this passes.
The leaks of ids and face mappings would be through the roof.
Imagine the chaos those albertan separatists are gonna cause with this and the electoral list.
Imagine the chaos those albertan separatists are gonna cause with this and the electoral list.
What’s up with the electoral list?
It looks like a mla has leaked the list to a third party.
It looks like a mla has leaked the list to a third party
Specifically to the separatist lobby.
Age verification would be fine if it was an OAuth type thing - I sign in with the government on the government's website, they report back that I have the 18+ grant. I don't know why they're going in this direction of just requiring that private companies collect a bunch of personal information to "verify" me
Is there anything to stop the government side from compiling a list of users and the sites that request verification? Because that just makes a centralized target for hacking or internal crime. There's got to be a way that allows for both verification and zero trust :/
I mean...yeah...but it sounds really bad on the surface.
Crypto. Namely, certificates or smartcards.
Imagine if your driver's license were a smartcard. It'd essentially just be a cryptographic key pair that asserts that you are "you" because the card says you are and you both have the card and know the unlock PIN.
Now, that sounds like the government could easily track you, but not quite. All that really matters is that the certificate is valid. Not expired, not revoked, and there is a mutual trust in a third party (the issuer).
This doesn't require a query to the issuer. It can, and should, i.e. using OCSP or CRLs. CRLs, in particular, are a bit better here...instead of the service going back to the issuer and saying "is this certificate still good", instead, the issuer periodically publishes a list of all revoked serial numbers that get downloaded by anybody who wants them.
The important thing is, the service provider (i.e. the website) never has to ask about you by name. They know you are you, because you possess your private keys, and they trust that the issuer of your certificate (a corresponding public key, signed by the issuers private key) is thorough in verifying your identity.
I think a mutual-third-party trust model (basically, certificates) is about as good as it can get. I don't think you can verify without trust. That's not how the proverb goes. Not at all.
If age verification was an inevitability, you might be right here. I do not think we should accept age verification as an inevitability. This is a cynical attempt to 1984 us.
I really do feel that there should be an official means to verify your identity online. And it 100% should not be this shady bullshit we are being sold of uploading a video of your face and drivers license. Government-issued cryptographic identifies are about as good as you can get for something thats universally trusted (enough) to issue and validate IDs. That's...kind of their thing.
But...it needs to be reserved for when you need to do "official" stuff, like accessing your health records, banks, interacting with the government, signing forms as legally required, signing emails (at senders discretion), etc.
Needing to provide your ID to shitpost on reddit or search yandex for femboy dwarves is a bridge too far.
This is the way. There are many cryptographic ways to make this possible without sharing any personal or usage information with any party. Too bad our legislators as a group are too fucking stupid to understand any tech more complicated than two cans with a string.
That has the same issue as a lot of privacy-protecting age verification services, which is that there's never actually a moment when someone verifies that you are you.
Like, if someone sold their key and password to a few people, it would still work everywhere and there would be no obvious reason for the key to be revoked. All it takes is one poorly implemented (or malicious) website to capture everyone's keys and passwords, and then they sell them to kids.
I don't think there's a way to avoid that issue. You can either implement privacy or verifiability, but not both, and governments are going to trend towards verifiability.
This just demonstrates a common misconception of smartcards. The private keys are non exportable. They never leave the card. They can't. Leaving the card destroys them.
The PIN may be compromised, but without physically having the card, the PIN is worthless. Likewise, without the PIN, the card is worthless. You have to have both.
Now, yeah, people could sell them...but the only people who would are the very same whose identity is already practically "worthless" (in the capitalist sense) to begin with, so the market sort of solves itself there. If a person's identity were of any value, they wouldn't need to sell it.
It can be used for authentication, but it should be thought of more as a signature (but in many ways more secure and verifiable)
Can you explain how I'd use my smartcard to verify my age on a website? Does everyone need to buy a card reader for their computer?
That's the thing, you shouldn't have to.
But it could be used that way. The problem is, the types of certificates that I'm suggesting would offer no privacy at all, as they would have your real name associated with them, and they'd be issued by the government...essentially, the exact same idea as DoD "CAC" cards.
If it's the type of business that you want to supply with that info, that's one thing. But it would eventually, be compulsory, and that's not really what anybody wants.
There could be a happy medium, where you have to get validated in-person that you are 18+ by a mutually trusted agency, and get an 18+ "badge", through some sort of trusted medium.
Plenty of legitimate, innocent, reasons to be getting an 18+ badge..and technically no real reason to record a persons information, except for anti-fraud measures.
I doubt there would be much more of a black market for that than there is already existing for getting nicotine and alcohol to kids. Shady people gonna shade. And of course, parents can slip one under their (teenage) kids pillow if they think they can be responsible with it.
Either way has a dystopian end...but that doesn't dismiss the value of having an "official" digital identity for "official" purposes (for whatever is deemed "official" by the holder).
Gotcha. That was my misunderstanding then. I've seen people talk about something similar: a government issued "id" (potentially tied to your driver's license or whatever) that digitally identifies that the holder is of a certain age, but nothing more. That's what I thought you were proposing here as well.
I don't think there's anything wrong with your idea, but it also seems unnecessary, and makes it easier for businesses to track you - not harder. If the purpose isn't to obfuscate information, they can just look at a driver's license and see their birth date and that the picture matches the person using it. It also doesn't really have anything to do with the subject of the post (online age verification).
There should be no reason that any website gets access to your private key.
Or just the next government comes in and targets gay/trans people based on the websites they use.
Regulate algorithms, beef up moderation and dns filtering is the proper way to protect kids.
So I'm gonna have to go on the darkweb to see pictures of naked milves?
i'm not saying this isn't BAD but honestly it's hard to care that much because the internet i care about is already dead, anyway. we need to build our own mesh network
Honestly, you're not wrong.
Try and find a country not doing this or something almost the same, I'll wait.
Literally every country is trying to pull this shit in 2026.
Literally every country is trying to pull this shit in 2026.
That doesn't mean it isn't a bad idea that is being poorly implemented and will absolutely have massive privacy implications.
I bet NOW people are gonna care about that. After a lifetime of Facebook/Linkd-In etc, Foursquare/Strava/etc, unencrypted email, plaintext passwords, actual decades of never once creating a GPG key, using public WIFI, sticking passwords to monitors, and using "password" as a password, this is gonna be the straw that breaks the camel's back...
Privacy is DEAD. Just wait until every camera in public is also generating a constant stream of AI observations.
I don't even care about privacy (per se) anymore, I want just non-commercial spaces. You can see my ass if you want, I will gladly trade privacy for expression in a place I'm not being exploited by capital.
Funny how coordinated this global surveillance movement is. Almost enough to lend credence to tin foil conspiracies.
Had the same wtf thinking how this is going down globally. Like America's situation currently, totally get it. But, everyday it seems another government is pushing this regardless of the political spectrum that supposedly exists.
Really curious why I'm not seeing more articles about the individuals in legislation that are pushing this and what funding/lobbying they're receiving. There has to be multiple common threads because politicians aren't commonly "in the know" of current tech unless someones whispering a direction in their ear.
I mean, look at some US states for an example of this.
FFS. Watching my country devolve in real time is certainly something. I have no idea why humans are so content to speedrun digital authoritarianism.
Whereas online age-verification and age-estimation technology is increasingly sophisticated and can now effectively ascertain the age of users without breaching their privacy rights;
Citation needed. Please LPC provide ONE example of this, anywhere in the world, because it does not exist.
I'm writing my MP right now.
"How will this system differentiate a person one day before their 18th and one day after"
I just spent over an hour writing my email, it’s not done yet. Please also write one.
Just imagine the foreign interference opportunities of a foreign company+government having a list of every Canadian politician or businessperson on grindr or looking at gay porn as a really trivial example.
This is the hill to metaphorically/politically die on.
As written this bill is awful. It literally says to follow “best practices”, which in 2026 clearly means storing data unsecured since basically every one of these companies has leaked.
Comrade, I am a black anarchist. If I have a problem with a politician, I directly go to their office, and clean the guillotine until I see the proper rules set in place. This is Nazism, so they better have a good excuse why they shouldn’t become “a starlight tour.”
I say this the the utmost contempt, so please read this in an aggressive and yelling voice:
WHY THE FUCK IS THE GOD DAMNED FUCKING BOOMER PUSHING FOR KAWS SHE DOESNT UNDERSTAND.
WHAT BOILED CAULIFLOWER EATING FUCKING MORONS DID THEY SURVEY FOR THIS.
Can we get some god damned informed people on government already? Jesus.
Can we get some god damned informed people on government already? Jesus.
It's called direct democracy, & it’s 
Is it? Because 80% of the country are numerically and technologically illiterate.
-
Now yar talking 2 different things. If you want informed folks making appropriate decisions informed folks need to be empowered to do so. Politicians precisely do not, since their praxis is to empower themselves above all information and reason. A direct democracy allows the informed access to act on informed actions. While a politician doesn't have to recall what they voted last bill.
-
If you want more informed folks, that are capable counters & somewhat better technological literacy, you also need to directly mentor. More mentorships, less schooling. Direct democracy needs both to work.
-
I pray you Canadians get your acts straighter than NaziSians. Fuck🖕oppressors.
Americans attempting to escape to Canada: "Welp, guess I'm turning around."
🔴 Gary Anandasangaree’s best friend.
First I'm hearing about this one. I guess OpenMedia, David Fraser, and Michael Geist are too focused on C-22 to talk about S-209.

no comments (yet)