Hacker Newsnew | past | comments | ask | show | jobs | submit | thunderbong's commentslogin

Can you elaborate?

Nope

Nope



This isn't Reddit

I don’t mean to encourage anyone though they are known to use body doubles, AI, and psyops.

> they are known to use body doubles

Known by who? The body double theory is old hat, and poorly supported by evidence.


I’m really not trying to sell this one, though a quick google turned up a Newsweek article about the Japanese weighing in.

Otherwise, didn’t they round up a bunch of doubles when the Ukraine war broke out? that recent Putin Judo practice video was kind of strange. I’m no fan, though I’m pretty sure Putin was a real badass in his day and that guy looked kind of lacking. We all get old!


I have a question that's been going through my mind -

Why is age verification connected with identity verification?

I understand why the former is not possible with the latter, but my question is -

Whichever entity is responsible for the verification can just pass on the age verification confirmation without passing through any of the other details, right?

Am I mistaken here? Because if this was possible, I could still go ahead with using the VPN.


This seems to be what "double-blind" verification is doing:

> The report highlights emerging approaches, such as “double-blind” verification systems used in France, where websites receive only confirmation that a user meets age requirements without learning the user's identity, while the verification provider does not see which websites the user visits.


It's a question of blind trust in your government to respect this, when they themselves control the age verification apps, at least in the EU who wants to impose its own system and not rely on an autonomous third party.

It is cryptography. Just like you don't have to blindly trust Signal with end-to-end encryption (their client app is open source), it could be implemented in a way that you don't need to blindly trust your government.

> Why is age verification connected with identity verification?

With the EU's current approach, disconnecting the two is the exact point. There is no third party, the government ID you already have can be used to verify your age directly with an online service.


You are right, it is possible to do age verification in a privacy-preserving manner. Feels like most people being very vocal against the idea don't know about that.

At least most complaints I see here are assuming that age verification means tracking.

Too bad, there could be interesting discussions about privacy-preserving age verification, if people just bothered getting informed before complaining.


We already have privacy preserving age verification: the website asks for your age (or just whether you're over 18), and lets you through.

There's no issuing party to collude with to deanonymize users, no hard requirement on owning a Google- or Apple-vetted smartphone, and generally no way to identify me besides my choice of random numbers.

You move past that, and people rightfully tell you that your scheme outright breaks privacy, or that it makes too many assumptions or is too complex to easily verify it actually preserves privacy.


> You move past that, and people rightfully tell you that your scheme outright breaks privacy, or that it makes too many assumptions or is too complex to easily verify it actually preserves privacy.

Encryption is too complex to easily verify it actually protects your data. Still you use it all the time without even knowing it.


From a tech perspective it has been a solved problem since about a decade ago, via DID (decentralised identities) and their Verifiable Proofs.

The EU digital wallet framework is built around those, and your suggested scenario is a first class citizen.

It is now moving from the academic/research world, to the political field, and feedback/pressure from both commercial groups and political agendas is muddling the field.

Here are some links to canonical docs, you can easily find high quality videos that explain this is shorter/simpler terms to get a grasp of it.

https://www.w3.org/TR/did-1.0/

https://www.w3.org/TR/vc-data-model-2.0/

A note: it’s one of the healthy byproducts of the blockchain age, don’t get sidetracked by some hyped videos from crypto bros.


It's a "solved problem" that didn't ever need solving in the first place.

Preserving privacy within a rule based democracy is important to me.

This is the foundational tool for 450 million EU citizens, so I think is very important.

We likely have different interests.


Buying alcohol online without having to show a website or a delivery driver my social security number is a challenge that needs solving. Same with picking up expensive parcels from package drop-off points in my country.

You can debate whether setting up such a system for things like social media is a necessity or desired in the first place, but being able to show someone a QR code that verifies my name and age without exposing all kinds of other details about me is extremely useful.




I had a look at the issues. I see comments added to each one of them. Some of them are already on the roadmap.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: