today I created a burner google account. these days google requires an Android phone in order to even create an account so I used an old phone to scan the QR code ( I am pretty sure this lets google grab all of the metadata of the mobile phone ). after about 1 hour creating the account. google’s automated system disabled the account however I appealed and got the account back. before someone asks I need google because of where I live.

this made me wonder what if google mandates age verification? if there were age verification google would immediately notice that I am creating another account ( burner account ) which it won’t like. burner account won’t be created in the first place!

we already have too much surveillance and this makes it worse. my mobile number is already tied to my read government identity. I DO NOT want my online account to be tied to my read identify too! it is sad, it really is

  • state_electrician@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    22
    arrow-down
    9
    ·
    11 days ago

    The EU is building the EUDI wallet (or rather requiring each member state to provide a solution) and it will be possible to prove your age with that without disclosing details about your identity. And it’s even possible to do this on your device, so the state won’t know who you’re proving your age to. Just saying that there are ways to do it right. It’s just a matter of whether everybody wants that.

    • schnurrito@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      32
      arrow-down
      6
      ·
      11 days ago

      Just saying that there are ways to do it right.

      No, there is no way to do “censoring access to information for young people” right. That remains an entirely illegitimate goal no matter which mechanisms you invent for doing it in a privacy preserving manner.

      • HelloRoot@lemy.lol
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        13
        ·
        edit-2
        11 days ago

        Using the neutral term “information” here is doing a lot of heavy lifting for your argument.

        Nobody is banning the youth from accessing wikipedia or a library or minecraft.

        And if a young person really wants to watch at porn, torrenting/piracy will always be there without age verification.

        Speaking of minecraft and circumvention, do you remember the uncensored library map? https://www.techdirt.com/2020/03/19/routing-around-damage-censored-reporting-hosted-custom-built-minecraft-library/

        I bet someone inclined to do so could host a pornhub mirror/proxy inside of a modded minecraft map.

        But also, if the parents decide that it’s part of growing up they can just give their kids access to porn.

        Oh uuuh I mean, not porn, iNfOrMaTiOn.

        • schnurrito@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          19
          arrow-down
          1
          ·
          11 days ago

          Nobody is banning the youth from accessing wikipedia or a library or minecraft.

          Wikipedia has pornographic images and videos in it (certainly in its media archive, Wikimedia Commons, and some of them are embedded in articles).

          Library: ??? Are we still talking about the Internet?

          But also, if the parents decide that it’s part of growing up they can just give their kids access to porn.

          Yes. Giving kids access to the open Internet is giving them access to a repository of nearly all human knowledge and endeavors, including (but not limited to) porn. If parents believe their child isn’t yet developmentally ready to be exposed to all human knowledge and endeavors, they shouldn’t be giving that child (unsupervised) access to a worldwide information system whose entire purpose is to provide access to exactly that.

          • HelloRoot@lemy.lol
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            8
            ·
            edit-2
            11 days ago

            You keep speaking in extremes and absolutes. There is also pornographic content walking outside on the street in the city if you so wish to classify it (and some people certainly do to they point where they get turned on by seing a bare ankle).

            Certainly the pictures and videos on wikipedia which you chose to consider pornographic rather than neutrally informative have a different set of qualities then what you would find in the extreme sections of porn-serving websites.

            There is a middle ground. You can give partial access. And age verification is one more tool for that (we already have parental controls for routers and mobile internet simcards and smart devices)

            I don’t like nor want age verification btw. I just don’t agree with your arguments against it, because I find them weak.

            • schnurrito@discuss.tchncs.de
              link
              fedilink
              English
              arrow-up
              8
              arrow-down
              1
              ·
              11 days ago

              Certainly the pictures and videos on wikipedia which you chose to consider pornographic rather than neutrally informative have a different set of qualities then what you would find in the extreme sections of porn-serving websites.

              Look into the Wikimedia Commons category “pornographic videos” and you’ll see what I’m talking about. Not linking to it because I’m not sure I’m allowed to do that here.

              There is a middle ground. You can give partial access.

              Hence why I wrote specifically about the open Internet. You are right: there are ways to give people access to only a selected part of the Internet. If parents decide to do that, fine; doesn’t have to concern any website operators, or any adults.

              • HelloRoot@lemy.lol
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                1
                ·
                11 days ago

                Hence why I wrote specifically about the open Internet. You are right: there are ways to give people access to only a selected part of the Internet. If parents decide to do that, fine; doesn’t have to concern any website operators, or any adults.

                Like I said, I agree. But your initial argument is no good. You toss everything into one box to make your claim appear stronger but in doing so you actually make it dismissable. Stay differentiated.

            • LupertEverett@lemmy.world
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              1
              ·
              10 days ago

              You keep speaking in extremes and absolutes

              YOU are the one that immediately jumped to porn, shithead. You DON’T get to decide on talking about extremes and absolutes.

              • HelloRoot@lemy.lol
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                1
                ·
                10 days ago

                I didn’t jump to it. It’s the primary reason for age verification.

                Calling it “information” to avoid talking about it is intellectually disingenuous.

    • stoy@lemmy.zip
      link
      fedilink
      English
      arrow-up
      16
      arrow-down
      1
      ·
      11 days ago

      Nope, it won’t be anonymous.

      Look, any kind of digital age verification must be connected in some way to an actual identity.

      If you are running a community operating under EU laws to require age verification, then a simple true/false statement won’t cut it.

      You will be required to log a personal ID number of the user, signed by the digital wallet issuer, that is the only way to guarantee that a specific person was verified to be of age.

      You as an admin of the community might not know the identity of the users, but the government can tie the account back to you.

      • ISOmorph@feddit.org
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        5
        ·
        11 days ago

        The EUDI wallet is advertising that it can prove your ID on device and just send a “is over 18” confirmation. So at least in theory, the wallet should provide verification without giving your ID to whatever service you want to use. I do doubt however, that ot will work that smoothly and securely in practice

        • mnemonicmonkeys@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          3
          ·
          edit-2
          11 days ago

          The EUDI wallet is advertising

          ADVERTISING. Don’t treat marketing as truth

          So at least in theory

          No, there’s no theory here. Just lies.

          As Louis Rossmann once said: Dont accept the premise of assholes. Don’t repeat their lies for them.

        • DeadBedroom@fedinsfw.app
          link
          fedilink
          English
          arrow-up
          1
          ·
          10 days ago

          Good thing their app requires Google Services making lineageOS and eOS unable to run it (no desktop app either)

    • hirihit640@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      13
      ·
      edit-2
      11 days ago

      Zero-Knowledge Proofs Aren’t Age Verification Silver Bullets

      The idea behind ZKPs is that you are issued a “token” that vouches for your age every time you log in, creating a constant link back to the entity that verified you. The issuer of the tokens these AV schemes rely on could track every time that credential is used, creating a dangerous trail of metadata on any user they wanted to target. The issuer itself could be pressured by authoritarian governments to remove a user’s access to a service, essentially removing that person’s access to the internet entirely.

      a centralized identity verification system creates a single point of failure that is extremely vulnerable to both cyberattack and authoritarian overreach.

      Personally I’m optimistic that tech like this can be used in positive ways, but imo they should be developed transparently (open source) and decentralized.

      • state_electrician@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        3
        ·
        10 days ago

        In that argument the issuer is a private entity. In my argument the issuer is my country itself and they’re not involved in the proof, because it happens on my device. The EUDI wallet, at least in theory, will be trusted, because it is signed by an EU member state. And it runs on my device, so the state doesn’t know what I use it for. Just like a physical ID.

        • hirihit640@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          edit-2
          10 days ago

          Ok so you clearly didn’t read the article because it calls out EUDI explicitly:

          By the end of 2026, the 27 states within the European Union are expected to have infrastructure in place to do age verification within a “mini-wallet” app that will live inside the EUDI (European Digital Identity) Wallet. This is being met with plenty of warranted criticism from digital rights experts. The “mini-wallet” version is already being rolled out, with promises that the ZKPs are in working order. But recent insights show that the ZKP features aren’t yet turned on except for the closed demo/prototype build (not the version of the app people are using “out of the box”), which the vast majority of everyday users can’t access.

          Worse still, a security researcher found they could bypass the app’s system using a quickly built Chrome extension that tricked the app into repeatedly accepting the same “over-18” token. It did so without ever asking for fresh verification.

          Over 400 security researchers signed an open letter stating that age assurance checkpoints, even if implemented with privacy in mind, would cause more harm than good. A primary focus of their concern, which we share, is the fact that a centralized identity verification system creates a single point of failure that is extremely vulnerable to both cyberattack and authoritarian overreach.

          Once the “mini-wallet” version of this is fully integrated into the EUDI Wallet, it will replicate these same failures, perhaps more, but at a much larger scale. At that point, the failures will involve many more pieces of sensitive information that the EUDI Wallet contains: passports, driver’s licenses, travel information, financial information, to name a few.

    • NaibofTabr@infosec.pub
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      11 days ago

      Storing identification information on an internet-connected system will never be safe for the people whose information is collected there. Such databases are high-value targets. They always get attacked, and the information stolen. This cannot be done safely.