triceratops
4 hours ago
I'm going to restate my proposed age verification system here. I've posted it several times as a comment on this website. It works as follows:
1. A private company, let's call it AgeVerify, issues scratch-off cards with unique tokens on them. They are basically like gift cards.
2. AgeVerify's scratch-off cards are sold exclusively in IRL stores. Preferably liquor stores, adult stores, and/or tobacco/vape shops. Places that are licensed and check ID.
3. Anyone who wants to verify their age online can purchase a token at a store. The store must only demand ID if the buyer appears to be a minor (similar to alcohol or tobacco purchases). The store must never store the ID in any form whatsoever.
4. Giving or selling these tokens to a minor is a criminal offense. If a store does it, they lose their liquor or tobacco license. Treat it just like giving a minor alcohol or tobacco.
4a. Run public service announcement campaigns to communicate that giving an AgeVerify token to a child is like handing them a cigarette. There should be a clear social taboo associated with the legal ban.
5. The buyer of the AgeVerify token enters it into their account on whatever social media or adult website they want to use. The website validates the code with AgeVerify.
6. Once validated, the code is good for 1 year (or 6 months or 3 months, adjust based on how stringent you want to make it) - then it expires and a new one must be purchased.
7. A separate token is required for each website/each account.
8. The website is responsible for enforcing no account sharing.
No identifying information is stored anywhere. Kids find it very hard to access age-restricted materials online, just like the vast majority of kids don't easily have access to alcohol or cigarettes.
refibrillator
2 hours ago
No disrespect but paying to verify age feels absurd, let alone putting a private company in charge of what should be an essential function of the government.
How about when you turn 18 or whatever the government gives you a signed JWT that contains your DOB? Anyone who needs to verify your age can check that and simply validate the signature via a public key published by the government.
Simply grab a new JWT when you need it, to ensure privacy.
And sure, sprinkle in some laws that make it illegal to store or share JWTs for clearly fraudulent intents.
> the vast majority of kids don't easily have access to alcohol or cigarettes
This feels like it comes from an affluent perspective, where I grew up it was trivial to acquire these things and much worse, there will always be someone’s older brother etc who will do this for $20 because he’s got nothing to lose.
tbossanova
an hour ago
So they give you their jwt for 20 instead
nej24swei
3 hours ago
And I am going to restate how it’s an absolutely terrible idea, and will always fail with its perverse incentives. This does not solve any problems and creates many more.
Your idea will create a massive black market for “adult validation tokens”, handing billions of dollars to criminal groups reselling these things.
And then where such a system goes in 5-10y. Sure it’s sorta anonymous today, but then new government decides - “let’s make it mandatory to be sold with a binding identity and credit card.” Suddenly you need that token to log in to any public website. And Chinese, European and American authorities demand realtime access to the global logs.
Every censorship system you build, even if it seems “good”, will eventually censor you and the things you care about. Don't design or build oppression technology.
The very idea that you can realistically enforce Point of Sales age checks at scale is not sensible.
triceratops
2 hours ago
> Your idea will create a massive black market for “adult validation tokens”,
No bigger than the current black market for beer and cigs for kids. Adults have no need to resort to black markets. They can buy this stuff legitimately.
> Sure it’s sorta anonymous today, but then new government decides - “let’s make it mandatory to be sold with a binding identity and credit card.”
They're already trying to do that right now! If we can head them off with a system that's as robust as age verification for alcohol we take away the moderate voter's support for making everyone upload passports to access FaceTok.
> Every censorship system you build, even if it seems “good”, will eventually censor you and the things you care about
Hasn't happened to cigs or booze so far. How long is "eventually"?
> The very idea that you can realistically enforce Point of Sales age checks at scale is not sensible.
This needs strong evidence. My evidence is that we already do it for many products.
> Suddenly you need that token to log in to any public website. And Chinese, European and American authorities demand realtime access to the global logs
If you treat everything as a potential slippery slope you won't get anything done. Right now the threat is governments mandating actual ID and destroying everyone's anonymity under the guise of protecting the children. I fear they have the votes to ram it through. Unless we find a good enough alternative that preserves privacy.
_aavaa_
2 hours ago
> No bigger than the current black market for beer and cigs for kids.
I don't think this part is true. Kids are currently used to having access to all of these services. And there is a lot more utility to having access to the whole internet, than having a a few packs.
To say nothing of the fact that these codes can be distributed digitally once they have been purchased. So it's harder to deter.
triceratops
2 hours ago
> these codes can be distributed digitally once they have been purchased
How do the kids pay for them?
nej24swei
2 hours ago
Everything is a slippery slope. Better nothing be done than keep inventing new ways to oppress humanity. Why does something need to be done anyway?
You can’t nerd harder and solve this problem. You have to fight these ideas at the root, and you my friend are being the so called “useful idiot” by raising and supporting such oppression and censorship.
dennis_jeeves2
11 minutes ago
>Better nothing be done than keep inventing new ways to oppress humanity
Well, you are correct. But you see people want to have a sense of control, so they think that doing SOMETHING is better that nothing, not realizing that often in some situations,s inaction is the best course of action. Among other examples where I think inaction is good are free markets and many cancer treatments.
triceratops
2 hours ago
It's coming either way. I prefer a future where I don't have to upload my passport for every website.
If you think you can fight it you're the "useful idiot" for the people who would prefer that we all upload our passports.
ccppurcell
29 minutes ago
I think your objection regarding future governments is valid. The others I don't think are valid. For the record I agree with your conclusion that any effort like this is doomed to fail. But we already enforce point of sale age checks at scale across multiple domains. And as for perverse incentives, part of the proposal is more or less identical to how scratch cards for gambling work. There probably is a black market for these and there probably have been attempts at fraud. But they aren't very large, not enough to tank the system anyway.
noahjk
3 hours ago
Some other near-term negatives of the planned idea:
- forces people to go to stores that primarily sell addictive substances
- prices out poor people, who can't afford adult websites, _or_
- even more money meant for bills / food is spent on addictions
- will have a stigma attached (why is that preacher in the liquor store? For porn or whisky?)
JumpCrisscross
3 hours ago
> Every censorship system you build, even if it seems “good”, will eventually censor you and the things you care about
Nobody is being censored. We regulate who can buy alcohol or tobacco, gamble at casinos, or operate a motor vehicle without it turning into a slippery slope.
Politically, the free speech argument might have had a point if Silicon Valley’s most-visible “free speech” advocates hadn’t lined up behind an authoritarian who’s creating diplomatic tension (and thus domestic political capital) the world over.
potsandpans
20 minutes ago
Accessing information is not a harmful substance or a dangerous activity that requires training.
The problem is that you are drawing the parallels in the first place. These are not the same things. This is precisely what a totalitarian regime espouses: information so dangerous it must be selectively distributed and access must be accounted for. Today it's pornography. Tomorrow LGBTQ materials are labeled as pornography. And soon thereafter you're putting in age verification to access non-state sponsored news, wondering "why is this required? should I be looking at this?"
I have no doubt that these are well-intentioned attempts by concerned citizens and civil servants to preserve some semblance of a decent society. The problem is that it's _always_ coopted. _Always._ Yet we can't seem to help ourselves but clamber towards more consolidation of power in the face of some new hysteria.
Your final point... _these supposed free speech advocates have supported an authoritarian, therefore they have no credibility_, _the only free speech advocates are in silicon valley_, _this is the only defense of free speech_. I have no idea what your point is.
That a few capitalists used free speech as a shield to make more money, we should throw the baby out with the bathwater?
I refuse.
StopDisinfo910
13 minutes ago
You are putting forward a false equivalence between social networks and accessing information.
Meanwhile actual studies on the topic show that social network actually creates addiction - who could have guessed when they were literally engineered for engagement - and have deleterious effects on health especially for teenagers.
This is not a free speech issue. This is a public health issue. This is the digital equivalent of the tobacco industry we are talking about, not a library.
mikkupikku
3 hours ago
> The store must only demand ID if the buyer appears to be a minor (similar to alcohol or tobacco purchases). The store must never store the ID in any form whatsoever.
Your plan requires nuanced implementation details which the general public is ill equipped to understand let alone independently verify. In particular, it is already normalized (in America at least) that liquor and weed stores will ID even the elderly, and scan the barcode on the ID into their computer. Let's say you want to ban the computer part outright; the public won't understand why, because it's already normal to them. So maybe you permit scanning IDs but regulate the way businesses can store/use that data; the public can't see into the computer, they have no idea if the law is being followed or not. This leads to lax attitudes towards compliance and enforcement both, and furthermore, likely results in public cynicism aka low expectations, which will give way to complacency. This is why I don't think your plan will work well, it's doomed to degenerate into surveillance.
mikestorrent
3 hours ago
> it is already normalized (in America at least) that liquor and weed stores will ID even the elderly, and scan the barcode on the ID into their computer
Then why are y'all so against Digital ID? We don't make you do that in Canada, it's just the clerk eyeballing your ID if you don't look old enough. I can't believe people are letting their ID get scanned and associated with vice purchases. Is it mandatory? Land of the free, eh?
iamnothere
3 hours ago
OP is wrong. Most places don’t do ID scans in my city. There was one place that did and I do not patronize them anymore.
I think there are some places where vendors have attempted to sell scanning systems as a way to identify fakes and banned patrons. It probably depends on the area how common it is.
mikkupikku
3 hours ago
Federal IDs are a political landmine for reasons mostly unrelated to privacy. The American public doesn't understand privacy issues, unless maybe you frame it as "ThE NUmBer OF ThE BeASt" oooo-oo spooky! Otherwise, most Americans just get stupified and say they have nothing to hide.
My point in all of this is that we should not delude ourselves by theorizing about ways this could be implemented in a privacy preserving way, because even if that's technically possible, its unlikely for things to work out that way.
plagiarist
37 minutes ago
America and the "if you're doing nothing wrong you have nothing to hide" / "police don't need body cameras" duality. You really cannot trust the typical person to be attempting cognition.
hypeatei
3 hours ago
I didn't even think about the ID scanning that already takes place. States that have legalized weed still have people who avoid the legal stores because of the scanning. You don't know who has access to that data and how it could implicate you because weed is still illegal on the federal level (e.g. gun owners may be wary of buying from these stores)
triceratops
3 hours ago
I've bought alcohol in many countries, including the US. Never had my ID stored. I am not ID-ed anymore.
But in any case, my proposal would ban ID scanning altogether. There's no good reason to do it for any purchase.
sethammons
3 hours ago
In the three states I've lived in, nobody scanned IDs. They eye balled it and maybe enter birthday into a system.
mikestorrent
3 hours ago
This is how it should be. If you happen to be 16 and look 19, well, fuck's sake, your body's old enough to drink now. People get so hung up on this kind of think-of-the-children crap like as though every generation before now didn't have plenty of underage drinking and debauchery. I'm more worried about people being shutins and not having any fun than I am about some kid having a beer.
coppsilgold
4 hours ago
You can do the same thing with online payments combined with a ZKP token system.
The issue is and will always remain reselling the age verification tokens. The entire system is pretty pointless. Kids will just have some hoops to jump through, and they will be very motivated to do so. Criminals will be eager to aid them for some change too.
Either you forget age verification, or you can forget about privacy. Because identity theft is the only hoop big enough for most kids not to make the jump - and even that may not hold, typically identity theft is carried out for financial returns, the age verification requirement will change the calculus on that and will likely expand that particular black market to both kids and people valuing their privacy.
In my opinion it should be the parent's job to police their kid's access to an internet terminal. It's not even that hard. Mitigating the mistakes of parents at the expense of everyone's privacy is a poor trade.
triceratops
2 hours ago
> The issue is and will always remain reselling the age verification tokens. The entire system is pretty pointless.
I forgot to mention in my original post. I'd also rate limit purchases. Maybe only allow purchasing one per visit.
> Kids will just have some hoops to jump through, and they will be very motivated to do so.
Maybe? Kids can just buy alcohol or cigs or drugs from criminals today. But most can't or don't. Some do, and we accept that as a society. And we punish the criminals who enable it.
This isn't like illegal drugs, where criminals have a massive market (adults with cash). A black market catering to only minors isn't very lucrative.
Moreover social media's network effects work in our favor. If most kids can't join, their friends are less motivated to get in.
lo_zamoyski
3 hours ago
Just because something can and will be circumvented doesn't make it useless.
People will continue to murder other people. That doesn't mean that criminalizing and punishing murder is pointless.
Now, whether the above scheme is prudent or workable, that's a separate question. But the counterargument to the scheme cannot be "It's all or nothing".
coppsilgold
3 hours ago
Murder is all but impossible to prevent, the reason the murder rate is kept low is because it's difficult to evade attribution after the fact.
In this instance we are talking about a technology that is impossible to attribute by design, the only way attribution will happen is if the reseller makes a serious mistake. There will be resellers that don't make serious mistakes. And unlike murder, very few successful resellers are sufficient to serve everyone.
kurthr
3 hours ago
Once you're selling them, put a bounty where kids can turn in the cards for money. Then you'll both set a price floor and know which stores are selling them and you can find out who's doing it. Nothing says that a token has to last for a constant amount of time. If kids turn in more than a certain percentage, then that location would have theirs expire early.
What I like here is that you've turned a digital problem into a physical one where we already have solutions and intuition for how to enforce rules.
ffsm8
2 hours ago
> Once validated, the code is good for 1 year (or 6 months or 3 months, adjust based on how stringent you want to make it) - then it expires and a new one must be purchased.
That sounds fantastic, were just one step away from making social media entirely controlled by one single party
Perfect to push anyone you don't like into irrelevancy, politicians will love this
Journalists too, finally they can be rid of these pesky YouTubers that show how politically captured they're! Just need to get someone with admin permission in that company and you're golden
triceratops
2 hours ago
> entirely controlled by one single party
Why? Multiple companies could compete in the market of age verification tokens.
Right now we have actual partisans buying actual social media companies (Twitter, TikTok) to control them. That's a much bigger threat vector.
JumpCrisscross
2 hours ago
> Multiple companies could compete in the market of age verification tokens
Why do we want this?
The entire proposal sounds designed to tank popularity for keeping kids off Instagram.
lelandbatey
2 hours ago
Politicians wouldn't know who has which "adult code", so they wouldn't be able to get a singular "adult code" banned/early expired by the (supposedly corrupt) code-keeping company. To know which code a particular Youtuber has, they'd need to be able to get that info from Youtube, and if they "have a man on the inside" of Youtube then they can just ask that person to ban the Youtuber in question.
PunchyHamster
3 hours ago
No need for separate company. Banks know your age. I'd imagine CC companies know or at very least can get age data from the banks they trade.
So it would be
1. Site let's you pick your "age provider"
2. You log to you bank/govt site
3. They only get age as response.
Even easier with CC, shops could just send payment request with minimal age, if it doesn't pass, no sell
triceratops
3 hours ago
> Banks know your age
They also know who you are. This rules them out of a privacy-forward age verification system.
amelius
41 minutes ago
Can't it be implemented such that the banks give out the age information without knowing the ID of the person on the platform?
ivan_gammel
15 minutes ago
Yes, browser can do that. A browser starts with GET and gets new HTTP 1xx or 3xx response with “Age-Verification: required <age>” header. Browser calls your AVP (defined once in preferences) and gets short-lived certificate of age (expires in 30 seconds), then passes it to website in “Age: <age> <certificate>” header. The website uses known public keys to verify “at least certain age” claim in certificate. AVP public keys can be published in some registry and cached by websites.
JumpCrisscross
2 hours ago
> Banks know your age
Why are we pretending Facebook and X don’t?
Start with liability. The age gates will erect themselves.
Ritewut
4 hours ago
Japan has a similar system for payments. If you prefer to buy things online with cash they give you a barcode you take to any convenience store. The store scans it and you pay with cash.
jimnotgym
an hour ago
Perhaps we should drop age verification and just ban sites that use AI to scam attention for everyone? I would be happy enough if X and FB were banned outright.
JumpCrisscross
3 hours ago
Why do you need a private monopoly or physical tokens?
This is trivially solved with national IDs and strict liability.
hypeatei
4 hours ago
So a kid just has to get their hands on a token then access is open to restricted websites for a year (or whatever time period) while adults are inconvenienced? The black markets for these things would pop up instantly and you'd deal with secondary effects of that (scams, fraud, etc.)
I think the whole idea of age verification on the internet is dystopian and should be tossed in the garbage.
postepowanieadm
4 hours ago
Nah, EIDAS2 got you covered - you use your european identity wallet.
triceratops
4 hours ago
The beauty of my proposal is you don't need that.
9dev
4 hours ago
But instead, you need this other thing, which requires elaborate infrastructure and new standards and regulations
buran77
3 hours ago
The other thing OP presents is very different from any eID scheme in terms of anonymity. You'd show an ID to a human at the counter and even if the seller stores your info somehow, it can't be linked to the token they sold to you. The required infrastructure is minimal and relatively simplistic. The only drawback is that being anonymous means it's easy to resell tokens.
An eID system links your real life identity to any use of the eID online. Anyone who thinks there's a math or technology that fixes this misses the fact that it's the trust in the humans (companies, institutions, governments) who operate these systems is misplaced. Math and technology are implemented by people so there are many opportunities to abuse these systems. And once in place I guarantee, without any shadow of doubt that sooner or later, fast or slow, it will be expanded to any online action.
I will take anonymity and the small minority of kids who will find a loophole to access some adult-only stuff over the inevitable overreach and abuse against the large majority of people whose every online move will be traced and logged.
nej24swei
3 hours ago
And who is the biggest winner?
Triceratops Age Verification services, provided a state-sanctioned monopoly on issuing Porn Licenses. Awful, really.
triceratops
2 hours ago
It doesn't have to be 1 company. Ideally it would be many companies competing on price, promotions, and other marketing.
nej24swei
2 hours ago
Ok, so grifting for you and your friends?
It’s a really bad idea. It’s not a problem that needs to be solved by building a market for porn licenses.
triceratops
2 hours ago
> elaborate infrastructure
Gift cards are "elaborate infrastructure"? C'mon be serious please.
izacus
an hour ago
Instead you give control over chilren to a private company like a silly american.
colonial
2 hours ago
You underestimate the average American teenager’s shell-buying game (honed for decades by our asinine alcohol laws.) I’m sure kids elsewhere would pick it up pretty fast too.
Plus, this would spawn massive online black markets for the codes, fueled by crypto/gift cards/other shady means of money transmission.
AnIrishDuck
4 hours ago
Or we have devices attest user age. On setup, the device has the option to store a root ("guardian"?) email address. Whenever "adult mode" is activated or the root email is changed, a notification must first be sent to the prior root email. That notification may optionally contain a code that must be used to proceed with the relevant action, though the user should be warned of the potential device-crippling consequences.
This setting is stored in a secure enclave and survives factory resets.
I will note that these two systems are not mutually exclusive. There are plenty of ways to "think of the children" that don't trample on everybody's freedom.
iamnothere
4 hours ago
Yeah, not doing this on my Linux devices.
EA-3167
4 hours ago
I’m in my 40’s and I’d rather just use a VPN, I can’t imagine that young people will feel any differently. Governments should feel free to take performative measures, and we’re free to circumvent them.
Leave people to their fantasies of digital control and let them learn lessons the hard way. This is not a technical issue anyway.
globular-toast
2 hours ago
So who do you give the private monopoly to? The next lottery winner?
sieve
an hour ago
This is a typical technical solution to a sociopolitical problem. The powers-that-be are not comfortable with the free-for-all that exists on the internet. All these laws are meant to fix that squeaky wheel, one ball-bearing at a time.
"Children" gets the Right to march behind you unquestioningly. "Misinformation/Nazis" does the same for the Left. This is now a perfect recipe for a shit sandwich.
SilverElfin
4 hours ago
While this can work I just don’t want any bans on speech for any age. These social media bans are going to next lead to porn restrictions and ultimately they will mainstream Christian theocratic values in public policy through an ever shifting morality goal post. That’s how it always goes. Enabling it through such solutions feels like a risk.
Greed
4 hours ago
It's arguable, even if you're right, that the net loss to humanity is still far greater without these restrictions than with. Modern social media is leading to multiple generations of emotionally stunted, non-verbal children. Many of whom literally struggle to read.
If you haven't seen it in person, it is now incredibly common for children as young as 1 or 2 to be handed an iPad and driven down an algorithmic tunnel of AI generated content with multiple videos overlaid on top. I've seen multiple examples of children scrolling rapidly through videos of Disney characters getting their heads chopped off to Five Nights at Freddy's music while laughing hysterically. They do this for hours. Every day. It's truly horrifying.
Parents are just as poorly equipped at dealing with this as the children are, the difference being that at least their brains have already fully developed so that there is no lasting permanent damage.
sampli
4 hours ago
Anti Israel speech will be the first to be banned
CommanderData
2 hours ago
It already is. Comments are shadow banned across social media, videos across Tiktok are shadow banned if they include certain mix of words.
There are cases of UK police turning up to homes for anti-zionist comments.
We're already there.
umanwizard
3 hours ago
I am sure that they will not lead to “Christian theocratic values in public policy” in France. That value system is fringe in France, one of the most irreligious and historically anti-clerical cultures in the world.
Among people who identify as Christian in France, the ones who could be described as radical or fundamentalist are a very small minority.
SilverElfin
3 hours ago
My observation is that there is a big resurgence in supremacist politics and the main identity involved is white Christian male. Maybe it’s not yet big in France but that’s what I see gaining momentum in many parts of Europe and North America.
umanwizard
19 minutes ago
You’re talking about a completely different thing, right-wing populist neo-nationalism based on an idea of European ethnicity and culture (which, of course, includes culturally identifying as “Christian”). This isn’t the same thing as being based on religious doctrine.
anal_reactor
3 hours ago
A very important part of the system is a nationwide program of sending homeless people to concentration camps so that teenagers wouldn't bribe them to buy TittyTokens.
Like seriously, do you really think that if currently minors can buy tobacco and alcohol using unlawful means, then your TittyTokens will somehow be magically immune to the same problem because you really really wish they would?
You can't patch this without creating some form of a central database of who exactly buys how many TittyTokens.
triceratops
2 hours ago
> do you really think that if currently minors can buy tobacco and alcohol using unlawful means, then your TittyTokens will somehow be magically immune
No I fully admit some minors will still get access to FaceTok. We accept this failure for alcohol and tobacco. We don't have internet connected beer cans phoning home when you open them, asking to scan your face.
But at least where I live, most kids aren't falling over drunk or puffing away at school bus stops. So if the system is good enough for selling actual poisons, it's good enough to limit most minors' access to online vices.
Moreover social media has network effects. If most kids aren't on it, the rest will likely not bother either.
bethekidyouwant
2 hours ago
Step 9 i buy my kids this card because this law is dumb