this post was submitted on 04 Mar 2026
726 points (98.9% liked)

Technology

82297 readers
6137 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] ExcessShiv@lemmy.dbzer0.com 107 points 1 day ago (11 children)

I am actually not fundamentally against the idea of age verification for some things online. We have many things with age restrictions in real life, for various reasons, it kind of makes sense to have it online as well for some things.

but...it has to be done with zero-knowledge proof so we limit the amount of private data exposed to the absolute bare minimum.

[–] Deestan@lemmy.world 107 points 1 day ago (1 children)

Zero-knowledge proofs are a good concept. They've been possible for a long, long time, and allow age check without surveillance.

So why are they not being used? Because age check is just a cover. These people want to do surveillance, not protect kids.

So it's a good counter. Want age check? Do it like this. Oh, you don't want it that way? Why not, pray?

Whether it works (it has, previously) or not (as with the current bullshit from the US), it does bring to the public debate that this is unnecessary surveillance.

[–] Kissaki@feddit.org 14 points 1 day ago* (last edited 1 day ago)

There's also precedent you can point to. Germany has implemented a reasonable system of digital identification and (seperable) condition confirmation (age gate).

[–] Wammityblam@lemmy.world 37 points 1 day ago* (last edited 1 day ago)

Maybe in alternate timeline where tech companies have historically acted ethically.

In this timeline where each new company and/or ceo is more slimey than the last, I know that any type of identification will be mismanaged at best or used maliciously at worst

All trust is gone between these companies.

[–] chunes@lemmy.world 15 points 1 day ago* (last edited 1 day ago)

There is already age verification. It's called an internet service provider bill.

I also want zero knowledge personhood/Nationality verification for social media. Maybe with age too. I want to know where the accounts come from and whether they are a bot or not.

It can be optional, as long as I get a filter to remove all non-verified people.

[–] WhatAmLemmy@lemmy.world 7 points 1 day ago

Best our corporate dictatorships can offer is requiring you to surgically implant a microchip into your brainstem. Everyone without the chip will be classified as woke, and cleansed by the AI killbots on judgement day.

All heil skkkynet.

[–] breezeblock@lemmy.ca 5 points 1 day ago (1 children)

Or — just make it easier for parents to install filters for their kids??

[–] BrianTheeBiscuiteer@lemmy.world 7 points 1 day ago* (last edited 1 day ago)

It's already easy as fuck. Most parents just don't bother. The mandates should be on ISPs and cell carriers to provide network-level filtering. I filter adult sites on my home network and there's no getting around that without cracking the password on the service or factory resetting the gateway.

[–] HulkSmashBurgers@reddthat.com 1 points 1 day ago (1 children)
[–] TechLich@lemmy.world 2 points 23 hours ago (1 children)

Whenever this comes up, this style of zero-knowledge proof/blind signature thing gets suggested. But the problem is that those only work if people care about keeping their private keys secret. It works to secure eg. "I own $1" but "I'm over 18" is less important to people and it won't be hard for kids to get their hands on a valid anonymous signing key on the web. Because the verification is anonymous and not trackable, many kids can share the same one too, so it only takes one adult key to leak for everyone to use. It's one of the reasons they push biometrics that at least appears to need a real human. Requiring ID has a lot of the same issues on top of being a privacy nightmare.

I'm starting to think that actual age verification is technically impossible.

[–] WhyJiffie@sh.itjust.works 2 points 8 hours ago (1 children)

that is less of a problem when the private key is not too easy to export, and when each private key has ratelimits for how often can they be used

[–] TechLich@lemmy.world 1 points 1 hour ago

Those things come with a big convenience and implementation trade-off that slows adoption.

If it's hard to export for technical reasons (eg. Needs to be in a tpm) then that adds hardware requirements and complexity and makes it difficult to log in on other devices. If it's a software thing, then it's rippable. Either way "install our government app to watch porn" is not an enticing prospect for people.

Aggressive rate limiting is also frustrating if you want to log into multiple things and it keeps blocking you because you're using your key too fast, but if it's not aggressive then it likely won't be effective unless all the kids sharing a key are trying to use it at once.

If it's a temporary thing where you have to auth with the government to get a fresh signing key that expires, you have the issue of having to sign into the government when you want 18+ content which is super uncomfortable.

I can see it being a browser-based thing set up a bit like video DRM but that would still need to talk to a government server each time for a temp key (like how licence servers work) and you'd need to be logged into their systems. It might still be the best option but it does still leak "X person wants to access 18+ content right now" to the government.

I'm really interested in seeing a technical/cryptographic solution that actually works but so far I haven't really and I'm starting to doubt that it's possible.

[–] BrianTheeBiscuiteer@lemmy.world 1 points 1 day ago (1 children)

Plenty of companies you already deal with already know who you are, thus how old you are. Cell carriers, ISPs, banks, stock brokerages, utility companies, and so on. It would be much more secure, done properly, for a service like this to provide a simple "yes/no" answer to the age question.

[–] ExcessShiv@lemmy.dbzer0.com 1 points 1 day ago

That would resemble a zero-knowledge solution yes

Well your fundamentally wrong enjoy your safe little cage bird, perhaps your master will lift the sheet today.

[–] atropa@piefed.social -3 points 1 day ago (1 children)

How old are you ? If i may ask.