• ImitationLimitation@lemmy.ml
    link
    fedilink
    English
    arrow-up
    5
    ·
    6 days ago

    For all those that truly believe this is no big deal, and honestly believe it’s about kids, and think all the commenters in here are silly or tin hat wearers… go read this:

    https://lemmy.ml/post/46083470

    Short version: US based company providing age verification has US Govt. surveillance within their stack that adds you to all kinds of potential lists, among other concerns. It also serves as a huge honeypot of data just waiting to be breached, and it will be breached.

    For those in the back not paying attention: THIS IS NOT ABOUT KID SAFETY, IT’S ABOUT TRACKING YOU AND YOUR KIDS!

  • BigMacHole@thelemmy.club
    link
    fedilink
    English
    arrow-up
    296
    ·
    9 days ago

    There’s NOTHING Safer than having the Epstein Class KNOW where Kids are and WHEN they’re Home Alone!

    -US Politicians!

    • VoodooAardvark@lemmy.zip
      link
      fedilink
      English
      arrow-up
      80
      ·
      9 days ago

      💯 don’t call it age verification - that’s just what the unmasked scooby-doo villain is still hiding behind.

    • nullify3112@lemmy.world
      link
      fedilink
      English
      arrow-up
      37
      arrow-down
      3
      ·
      8 days ago

      Well they could do it the right way where, for example, you go to your city hall to get a certificate of age where they check your ID. Then some cryptography happens so you only enter a public key from that certificate on a website or OS to verify your age.

      The website or OS doesn’t check your ID. City hall doesn’t know your browsing history.

      But I’m not fooling myself, that’s not the point of such a law.

        • MrKoyun@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          ·
          8 days ago

          Exactly. Digital ID verification is in no way comparable to physical ID verification.

        • ferrule@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          2
          ·
          8 days ago

          That’s not true. It’s simple if all you actually want is age verification.

          You go in to the government building and show your ID. Seeing you are 18 or older you get to go to another room where they don’t check your ID, just give you a token saying the one holding it is over 18. Make the token like a FIDO key where you have a pin you set yourself.

          There is an air gap between the validation and the token creation so there is no way to go from token to ID. You make the key use a pin so we consider it to be once usable by one person.

          The issue is not about the technology. The issue is that we all know this has nothing to do with kids getting on porn sites.

          • harmbugler@piefed.social
            link
            fedilink
            English
            arrow-up
            5
            ·
            8 days ago

            You make the key use a pin so we consider it to be once usable by one person.

            Now you have trusted the user not to provide the PIN to another, and the implementation is no longer correct. You’d at least need to use biometrics to tie the key to the person.

            • ferrule@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              1
              ·
              8 days ago

              You are changing the goal. The point of this is to provide THE USER with a solution where they don’t have to give away their personal information to the Government or the 3rd Party site. We do not care about situations where users commit crimes as that means our focus is on the Government’s needs which they would already have met by just implementing a “Show us your ID” solution.

              Now you could make the pin be a biometric so it’s physically connected to the user. But part of the solution needs to be that the token is not identifiable with the user. If I pull of my wrist band no one will know it was mine. If you throw out your token someone could go around testing everyone’s fingers and find out it was yours.

              • harmbugler@piefed.social
                link
                fedilink
                English
                arrow-up
                2
                ·
                7 days ago

                Without ensuring that the key issued to one person is not used by another, the key does not prove the age of the user, and isn’t that the whole point of the key?

                • ferrule@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  7 days ago

                  no, the point of the key is to access infomatîon without giving away personal information.

                  Even a photo ID doesn’t prove age. It just shows a record of what age the gov thinks someone is. They are still prone to forgery, misuse, etc. There isn’t any actual method of showing someone’s age so we can skip that part and focus on what the actual need of the user is, accessing a website while not handing over more personal information than is necessary.

            • ferrule@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              2
              ·
              8 days ago

              It can be a shared token. For example a cryptographic hash. There are many solutions for the problem of certifying a token while giving no traceable data.

              In most solutions there would be the traceability of knowing “User X went to site Y and site Z” but never knowing who “User X” is. There have been solutions proposed that create site specific hashes where it becomes more difficult if not impossible to track a user across different sites. So it just depends on if this issue needs to be resolved or not.

              Personally I would be fine letting every porn site I use know I’ve been to every other porn site. If you wanted to go somewhere that you don’t want them to know, throw out your token and go get a new one.

        • Holytimes@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          2
          ·
          8 days ago

          Never say never there is ALWAYS a way to do things right. But our government is too stupid to do it. So it might as well be impossible. Kek

    • anomnom@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      8 days ago

      If it’s completely local I’m less worried than online verification.

      I’m not uploading any age verification online. I’ll quit the internet first.

  • AdamEatsAss@lemmy.world
    link
    fedilink
    English
    arrow-up
    162
    arrow-down
    1
    ·
    9 days ago

    “Key questions remain unanswered, such as the definition of “operating system provider,” the type of verification required, the focus on major commercial platforms, and the potential scope beyond them.”

    I guarantee this bill is unenforceable. Cars, phones, traffic lights all have have computers with operating systems. All modern tech has an operating system of some sort. Also how do you even verify age? If my laptop is offline can I just not use it because it can’t confirm my id? What about tech that never goes online but has an OS, like a calculator? I can’t believe microsoft and apple are not lobbying against this. Who becomes liable if an “underage” person is accidentally given access or if access is denied to an “of age” person. I can just imagine an emt frantically looking for their driver’s license so they can use the computerized defibrillator.

      • floofloof@lemmy.ca
        link
        fedilink
        English
        arrow-up
        60
        arrow-down
        1
        ·
        9 days ago

        Microsoft and Apple. The internet will only allow OSs from large American corporations.

        I’d like to see the rest of the world say “fuck it” and carry on as before, leaving the Americans to censor themselves. But governments around the world are suddenly rushing to implement very similar terrible laws. It smells very coordinated.

        • pivot_root@lemmy.world
          link
          fedilink
          English
          arrow-up
          58
          ·
          9 days ago

          Meta is funding a lot of the lobbyists pushing for age verification laws. Uncoincidentally, Meta both owns a stake in a company providing identity verification as a service, and serves to benefit from not having to moderate its own platforms.

          • wonderingwanderer@sopuli.xyz
            link
            fedilink
            English
            arrow-up
            11
            ·
            8 days ago

            Citizens United, folks. Because nothing says “freedom of speech” like collusion, bribery, and conflicts of interest!

          • WanderingThoughts@europe.pub
            link
            fedilink
            English
            arrow-up
            8
            ·
            8 days ago

            And meta had a pretty big chance of just getting banned from being used by minors in places around the world, so it might not work out as hoped.

        • Regrettable_incident@lemmy.world
          link
          fedilink
          English
          arrow-up
          14
          ·
          8 days ago

          Yeah, governments all over are trying to implement the same shit, and I agree it’s coordinated. Many governments are also looking seriously at stepping back from reliance on US big tech firms though. Not that homegrown oppression and surveillance is any better.

        • Lemmyng@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          9 days ago

          But don’t some of these larger orgs fund Linux distros? Like Red Hat with Fedora?

    • Boomer Humor Doomergod@lemmy.world
      link
      fedilink
      English
      arrow-up
      36
      ·
      9 days ago

      It feels like a Mr. Smith Goes to Washington display would solve this.

      Just bring everything that has an operating system in it into the room. Cars, boats, planes, construction equipment, tractors, factories, knock off game consoles, literally every server on the internet.

      Show them the ridiculousness of this and maybe we’ll get dragged out by police and charged with contempt of congress

    • SkyNTP@lemmy.ml
      link
      fedilink
      English
      arrow-up
      19
      ·
      9 days ago

      If my laptop is offline can I just not use it because it can’t confirm my id?

      Yes. The powers at be will stop at nothing to take more, and more, and more power away from you. This is human nature.

    • Rivalarrival@lemmy.today
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      2
      ·
      8 days ago

      The problem comes when a public school’s IT department is deciding whether to go with a FOSS option, or a commercial OS. As the IT team has full control over the FOSS OS, the school will be held liable as the OS provider. They will select a commercial OS to avoid liability under these idiot laws.

    • nullify3112@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      4
      ·
      8 days ago

      What is this argument? You and I both know they want this age verification at the OS level for personal computing devices: phones, tablets and computers, maybe watches.

      Is this really what’s going to kill this law? Semantics?

      • vaultdweller013@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        8 days ago

        Yeah actually. A lot of laws get shitcanned into irrelevance due to being worded like shit on everything from the local to federal levels. That’s not even getting into conflicts with pre-existing well worded laws or the constitution as a whole.

        If it’s worded badly enough it may even just be thrown out on first test due to being vague and too widely applicable. Just for example I drive a 2001 Toyota Tacoma it has an operating system because it’s got an ECU, how the actual fuck would that interact with this law? Obviously the corporate answer is to force me to get a new car but the actual practical answer is that that isn’t viable, so it’s more likely the courts just gut an entire section of the law with one case. Keep up the gutting and sooner or later it’ll end up defunct.

  • bagsy@lemmy.world
    link
    fedilink
    English
    arrow-up
    112
    ·
    9 days ago

    They cant even define an OS. Do i need a fucking login for my wifi fridge and toaster. Such a stupid ffucking law.

    • nosuchanon@lemmy.world
      link
      fedilink
      English
      arrow-up
      15
      ·
      8 days ago

      Why does a fridge need to connect to the Internet? Or a toaster? Why does my toothbrush need Bluetooth?

      • ripcord@lemmy.world
        link
        fedilink
        English
        arrow-up
        16
        ·
        8 days ago

        OK, how about my surveillance cam? NAS appliance? My WiFi light controller? Network switch? They all run Linux.

        • nosuchanon@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          8 days ago

          Well now you have to provide ID to use any of those.

          This is just another form of control and a potential verified data stream for governments/corporations/marketers.

          How can you prove that internet traffic is a human and not a bot? ID verification.

          How can you generate more user data? Force them to provide ID for every device that is connected.

          Want to control piracy? Easy with OS level ID requirements.

            • nosuchanon@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              8 days ago

              They will repurpose the same security chips that make digital payments and OS verification soon enough. Then you cannot bypass digital ID because it is on the hardware level.

              Seems they are starting with software compliance to see who will voluntarily do their dirty work for them. Assume that M$ and App£€ will comply while making it difficult for smaller independent developers to comply thus removing any privacy options.

              Same with Win11, force people to upgrade working tech because it lack hardware security chip support. Call it “anti-piracy” or “security updates” and force people to comply.

              • endlesseden@pyfedi.deep-rose.org
                link
                fedilink
                English
                arrow-up
                3
                ·
                8 days ago

                ms, google(android) and apple have already implemented this. it’s waiting to go live. there was a discussion about it quite a while ago.

                that’s what this infrastructure is for. all of these bills are written with google/ms/apple accounts with subusers in mind.

                California one doesn’t even have language to let adults have a user legally…

                ultimately I think it’s apple/ms working with meta hoping to force people to use Thier software

  • FosterMolasses@leminal.space
    link
    fedilink
    English
    arrow-up
    95
    ·
    8 days ago

    Okay, what is this bill actually saying?

    That soon, you won’t even be able to own most computers without registering it under a government ID?

    Because that’s fucking nuts.

  • RizzRustbolt@lemmy.world
    link
    fedilink
    English
    arrow-up
    80
    ·
    8 days ago

    Palantir really wants it’s fucking database.

    All because Petey truly believes that there are demons living in the United States.

    • dev_null@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      7 days ago

      I keep seeing comments like this, and I just need to say, no Palantir doesn’t have any database. It’s a completely evil company that makes and sells surveillance software to governments and companies. Then the governments and companies have these terrible databases that they manage with the Palantir software.

      Palantir themselves don’t do any spying or data collecting. They sell tools so that others can do that. They absolutely take the blame, but I want people to understand what’s actually happening.

    • TransNeko@lemmy.world
      link
      fedilink
      English
      arrow-up
      35
      ·
      8 days ago

      there are demons living in the USA. all Petey has to do to find the closest one… is look in a mirror.

    • itisileclerk@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      7 days ago

      He is right, demons live in US. They are in various Federal, State, Local and Corporate functions. For example current Federal government are all demons (pretty much) and all of ICE employees. Demon here is “spirit or lesser humanity” or simly said Inhuman individuals.

  • Sanctus@anarchist.nexus
    link
    fedilink
    English
    arrow-up
    70
    arrow-down
    4
    ·
    9 days ago

    Everyone in this comment section, you’re just gonna take this? Its been time, but if this is what motivates you to throw bricks at politicians then lets go

      • FauxLiving@lemmy.world
        link
        fedilink
        English
        arrow-up
        18
        ·
        9 days ago

        Those violence inciting comments always read to me like “Hey, reply to me so you can be put on a watchlist”

        • 0_o7@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          4
          ·
          8 days ago

          Is there something that limits a person to a single lemmy account?

          You know, to make that watchlist effective?

          • FauxLiving@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            ·
            8 days ago

            You access the Internet through a network owned by a corporation under the jurisdiction of a government, your ISP knows who you are and so your government knows who you are.

            Both of our Lemmy instances are hosted by Hetzner, in Finland and Germany. Both instance’s connections are proxied through Cloudflare, an American tech company.

            Any one of these entities has the ability to track you to at least an ISP and potentially down to the nearest street intersection if you’re using fiber/cable. And that ISP will have records linking your IP lease information to your identity, or at least the credit card/billing information that you provided.

            The kind of people who would be putting you on a watchlist are not the kind of people who will be thrown off by simply changing usernames on social media.

    • yeehaw@lemmy.ca
      link
      fedilink
      English
      arrow-up
      21
      ·
      8 days ago

      The same way the next laws will keep kids safe. When you leave your front door, you will have to drop your pants so the TSA can check your asshole. It’s necessary. You know. To keep kids safe.

      /s

      🤦‍♂️🤷‍♂️

    • jalkasieni@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      17
      ·
      8 days ago

      This is about protecting the entrenched players in the OS games; Microsoft, Google and Apple. The likely end play for all this is the erosion of personal computing so they can rent (and therefore control) all the compute available to you, so you don’t get uppity and think of running your own AI, which they believe will be as integral to everyday life as the internet is today.

    • Zier@fedia.io
      link
      fedilink
      arrow-up
      16
      ·
      9 days ago

      Safe? Never. But it will help the pedophiles find more children online. Sickos!

    • REDACTED@infosec.pub
      link
      fedilink
      English
      arrow-up
      7
      ·
      9 days ago

      I don’t even understand safe from what? Seeing titties? That is not bad and needs to be part of any growing up human, we’ve been all thru this, and we clearly see what happens to people who don’t/were banned from normal childhood. All sorts of freaks.

    • End-Stage-Ligma@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      8 days ago

      It helps the rich oligarchs track their child harem and broodmares and make sure nobody is infringing on their “rights” to treat people as property.

  • AlexLost@lemmy.world
    link
    fedilink
    English
    arrow-up
    51
    ·
    8 days ago

    In the future, you’ll be sentenced to 10 years hard labour for a contraband OS while children are raped openly at lavish parties.

  • Eggyhead@lemmy.world
    link
    fedilink
    English
    arrow-up
    51
    arrow-down
    1
    ·
    9 days ago

    Don’t want to compete with a potentially capable Linux? Pay the government to make it illegal!

    • phutatorius@lemmy.zip
      link
      fedilink
      English
      arrow-up
      14
      ·
      8 days ago

      There’s already being work done to add an optional age-attestation in systemd.

      And note that none of the laws proposed so far are actually verifying age, they’re only requiring someone to enter it. That’s attestation, not verification. Verification will be the next tightening of the screw.