←back to thread

693 points macawfish | 6 comments | | HN request time: 0.207s | source | bottom
Show context
al_borland ◴[] No.44544145[source]
All these ID check laws are out of hand. Parents are expecting the government, and random websites, to raise their kids. Why would anyone trust some random blog with their ID?

If these laws move forward (and I don’t think they should), there needs to be a way to authenticate as over 18 without sending picture of your ID off to random 3rd parties, or giving actual personal details. I don’t want to give this data, and websites shouldn’t want to shoulder the responsibility for it.

It seems like this could work much like Apple Pay, just without the payment. A prompt comes up, I use some biometric authentication on my phone, and it sends a signal to the browser that I’m 18+. Apple has been adding state IDs into the Wallet, this seems like it could fall right in line. The same thing could be used for buying alcohol at U-Scan checkout.

People should also be able to set their browser/computer to auto-send this for single-user devices, where it is all transparent to the user. I don’t have kids and no one else’s uses my devices. Why should I need to jump through hoops?

replies(36): >>44544207 #>>44544209 #>>44544223 #>>44544253 #>>44544375 #>>44544403 #>>44544619 #>>44544667 #>>44544797 #>>44544809 #>>44544821 #>>44544865 #>>44544875 #>>44544926 #>>44545322 #>>44545574 #>>44545686 #>>44545750 #>>44545798 #>>44545986 #>>44546467 #>>44546488 #>>44546759 #>>44546827 #>>44547088 #>>44547591 #>>44547777 #>>44547788 #>>44547799 #>>44547881 #>>44548019 #>>44548400 #>>44548482 #>>44548740 #>>44549467 #>>44560104 #
1. drak0n1c ◴[] No.44545798[source]
Thinking about client vs server, wouldn't it be even less wide-ranging, less costly to enforce, and more appropriately targeted if such mandates are one-time and on the client side - only on device manufacturers and OEM-shipped OS? Suppose new mass market devices are defaulted to parental controls on, until unlocked by an adult at point-of-sale or afterwards through a form of validation? The KYC of who unlocked it could be anonymized or the PII-proving side of the log if it needs keeping could be on-device only (high bar for criminal investigations). There should be a clear exemption threshold for low volume indie products, build your own PC, and open source self-install like Linux - since the purpose is to protect ignorant/apathetic consumers.
replies(1): >>44545982 #
2. anondude24 ◴[] No.44545982[source]
Are you ok with all devices considering the user hostile and coming with heavy encryption and locked bootloaders?

> There should be a clear exemption threshold for low volume indie products, build your own PC, and open source self-install like Linux - since the purpose is to protect ignorant/apathetic consumers.

Then everyone will just follow a YouTube tutorial to reinstall their operating system and bypass restrictions. There were TikTok videos teaching kids how to steal cars, would there not be easy to follow instructions to bypass whatever client side filtering is implemented?

I get where you're coming from, but mandated client side filtering has been tried and has been ridiculed as a complete failure every time. Attempts have been made to market and provide filtering products to parents with little effect, with them either being easy to bypass or difficult to use.

It's actually kind of interesting to see the people who were fighting against client side filtering are now advocating for it, because server side restrictions are the next logical step.

replies(2): >>44546076 #>>44548196 #
3. al_borland ◴[] No.44546076[source]
This would actually be an effective way to teach kids about technology. If they learn enough to install their own OS, let them have their smut.

I’m hearing more and more how younger generations don’t have what people used to call basic computer skills, because everything just kind of works now. Putting up some road blocks that require research and hands on tinkering to solve, is an invaluable part of the learning process.

replies(2): >>44546100 #>>44562930 #
4. anondude24 ◴[] No.44546100{3}[source]
I'm not sure bribing kids with smut to learn computer skills is good branding.
5. rocqua ◴[] No.44548196[source]
> Are you ok with all devices considering the user hostile and coming with heavy encryption and locked bootloaders?

This might be the least bad option. If it prevents server side enforcement, then settling on government enforcement of the commercial status quo might be less bad.

And what you describe is already the case for almost all devices anyway. The commercial incentives are there. And sadly, from a security PoV it is also quite valuable.

6. drak0n1c ◴[] No.44562930{3}[source]
While I wouldn't put it that way, I definitely agree that local device technical obstacles are the best conduit for learning as a youth. As a kid and young teen during the 1995-2005 era there were a lot of hoops to figure out and jump through as a gamer with Mac and then Windows ME. There were no video guides or wikis - just print manuals and text forums. Needing to upgrade the family computer RAM from 128 mb to 512 mb to get WoW above 2-3 FPS was a formative experience.

One could say the same of server/cloud obstacles, but because those systems are afar and opaque, it's easy to be content copy-pasting scripts. And there is less sense of progression and ownership since it doesn't involve building up your own environment.