68
this post was submitted on 20 Dec 2024
68 points (100.0% liked)
TechTakes
1488 readers
80 users here now
Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.
This is not debate club. Unless it’s amusing debate.
For actually-good tech, you want our NotAwfulTech community
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I'll slightly nitpick the claim about the central ID register, because you can do a lot of this stuff decentralized with smart IDs.
I imagine it works like this: You somehow get your hands on a certificate that reads "yo, the controller of the key pair with public key a4c6... is over 18 - signed, new south wales records agency". You hook up your smart card to pass some cryptographic test, and voilá: you proved you have the ID of an adult and know their PIN.
Not that I advocate for IDing everytime you visit a website, but I guess I'd be fine with it for ordering weed online. I expect we'll get something like it in the EU, if we decide not to go full fucking surveillance state.
I mean, doesn't somebody still need to validate that those keys only get to people over 18? Either you have a decentralized authority that's more easily corrupted or subverted or else you have the same privacy concerns at certificate issuance rather than at time of site access.
The point would be, to roll it all into the ID issuing process. I think most EU IDs already have cryptographic identities built in. The certificate issuing should probably be a state service as well. The alternative would probably be, just mail your birth certificate and a 3D scan of your anus to the private age verification provider of your choice.
It of course all falls back to a central state authority. But the process wouldn't have to be more centralized and privacy-invasive than state IDs already are. Control of resident data could be kept at municipality level, and you wouldn't need a central approver, that gets a running feed of all my age-restricted activities.
Before I sound like I'm soying over ID verification, I'll add that all this junk can become insidious very quick, if it becomes easy to implement and gets used everywhere. I also detest beyond measure that my ID currently stores a scan of my fingerprint, and I hope the court-ordered deadline makes that shit illegal again in 2027.
no, they'll fuck it up as hard as possible. These are not people who give a shit about the privacy of the plebs.