On-device face scans and cross-platform age keys decrease privacy risks, but trust issues abound.
See full article...
See full article...
As a bi transgender woman who probably wouldn’t have made it out of high school without accessing online discussions around gender and sexuality that were definitely not easily available in my southern curriculum, this is absolutely my concern as well. I can’t promise I perfectly toed the line at all times (the early 00’s were a different time to be online), but that lifeline (and knowing I wasn’t alone in my feelings, even if my egg hadn’t cracked and I didn’t have quality trans resources at that the time) was so important to me and my survival. It is so much more essential now.
I can completely understand the sentiment, but do remember not all countries are like the US, with good government these measures can more or less work.
This wouldn't have changed the outcome much. Telling people upfront would have simply pushed the backlash sooner. Discord knew it was going to be controversial so they didn;t tell anyone (or delayed whatever announcements they did make to the last minute) because they knew.“Let me be upfront: we knew this rollout was going to be controversial,” Stanislav Vishnevskiy, Discord’s chief technology officer, wrote. “Any time you introduce something that touches identity and verification, people are going to have strong feelings. Rightfully so. In hindsight, we should have provided more detail about our intentions and how the process works.”
This is partly easy > Discord leaglly would have to disclose this information to Europeans under the GDPR and to citizens of California under the CCPA > so they might as well open the same data options up to all users.Discord also vowed to be more transparent about age-check partners, with Vishnevskiy agreeing that “you shouldn’t have to guess who’s handling your information.”
Interesting, I only use Discord on my desktop gmaing rig. Which has zero camera hardware or functionality available. So if the platform ever flags me to run some bullshit age check I suppose I'll need to stop using the platform.“We’ve set a new bar for any partner offering facial age estimation, including that it must be performed entirely on-device, meaning your biometric data never leaves your phone,” Vishnevskiy said.
The age verification should be providing nothing more than a yes/no or a number representing age. Any other data is an unauthorized intrusion.IMO that's just them selling advertising info.
There is no such thing as anWith FaceAssure, the age check is initiated without requiring a download, instead relying on an age-aware camera that returns “a vector back to the relying party,” such as Discord, which signals “that this vector will be similar for people of similar ages.”
age-aware camera, and the marketing term should be quoted to indicate that.vector. I hope it's not a picture of the user converted to a vector graphic... A C++ resizable array? A nickname for a domain specific perceptual hash?Let's not forget that Meta did this in secret while astroturfing a "grass roots" movement, spending over $2 Billion with a B! While I'm sure it was technically legal, talk about manipulation, sheesh.The Operating System Age Check laws in several US state legislatures are being promoted by a Facebook backed organization, and they will host the data exclusively. There is no carve out for open source organizations or devices or privacy, and the data will be in private corporate hands at all times, by law.
It's appalling. Haven't we fallen far enough?
I can think of at least four major use-cases for internet anonymity, in the United Sates alone:I remain puzzled as to why anonymity on the internet is considered sacred (or even desirable). In the pre-internet world I grew up in, there was no expectation of anonymity—if you walked into a public space and spouted insanities and threats to others, you could expect to be held accountable. If you went into libraries and researched subjects related to bomb-making, you could expect the paper trail to incriminate you. As for our democracy, it appears to have suffered its greatest damage in the past few decades from anonymous and unaccountable purveyors of online bullshit.
None of those are actually arguments for being anonymous though, not really.I can think of at least four major use-cases for internet anonymity, in the United Sates alone:
1) Shitbirds in GOP states insist on making medical decisions political, and outlawing often-times life-saving procedures in an effort to control women. Ask for advice online about what to do post-miscarriage? Straight to jail, apparently.
2) Shitbirds in GOP states targeting trans people with harassment over what should be a private medical decision between the trans person and their doctor.
3) Shitbirds in GOP states trying to make speaking out against their golden calf a legal problem for both non-citizens with legal visas and even some naturalized citizens, and get ICE involved.
4) Shitbirds in GOP states doxxing and harassing anyone speaking ill of Mango Mussolini, creating potential safety issues surrounding individuals exercising their 1st amendment rights.
I'm sure there's more, but that's a quick 5-minute pull off the top of my head.
Oh, I agree. In an ideal world, all 4 of those arguments wouldn't have to be even a remote thought in anyone's mind.None of those are actually arguments for being anonymous though, not really.
They're arguments against shitbirds.
Now from a practical standpoint I of course get your point, we live in the world we live in. But if we're striving for ideals I'd rather live in a world where you were free to speak your truths, about being trans, or wanting an abortion, or telling Trump to go fuck himself or whatever.
Having to hide isn't what I want to fight for, at least as a more end game goal.
It's kind of a false choice. If all your communications are signed with your name, aggregating them is trivial, and associating them with your other data is trivial. In that scenario, you could have laws protecting your privacy but they would be largely performative; in reality, you have lost significant privacy there.I post all over the internet under my real name. Not just here at Ars.
It's not hard to find me in other communities, I'm pretty much the opposite of anonymous. When I speak it's not hiding behind an identity.
I'm not suggesting everyone else needs to do that, simply that I made that choice decades ago, and I speak my mind on things still. So do plenty of other people. Frankly once you become any level of public figure with any kind of reach with your voice it's actually very difficult to be anonymous.
None of that stops people from using the internet. Or participating in debate or democracy.
There was a quaint period of time when sites flirted with the idea of "if people post under their real name they'll be better behaved!" That uh, didn't pan out. Turns out people are happy to show their whole ass even when their first and last name is attached to it, see Facebook.
There are all kinds of reasons people might still wish to stay anonymous. That's fine, I'm not arguing against it. Simply stating that I don't believe being anonymous has anything to do with a functioning democracy or society.
And honestly people are way less anonymous than they think they are even when not posting under their real name. And that's because the laws that allow scummy tracking are a real problem.
You are being fingerprinted at every turn. You are on camera when you leave the house. You are profiled left and right.
If I had a choice between two binary decisions, protecting being anonymous or protecting people's data and privacy rights even if every post they made had their full birth name attached to it I would take the privacy protections every time.
Now it doesn't need to be a binary choice! It shouldn't be. But in terms of ranking importance that's how I would put them.
I think it's more about scope and context. For instance, walking down a street you might be recorded—you're in public, that's probably something reasonable to expect. But there's imo a world of difference between walking in front of my neighbor's doorbell camera and being on their personal recording vs being recorded everywhere I go by Flock cameras that are compiling and cross referencing all my movements.It's kind of a false choice. If all your communications are signed with your name, aggregating them is trivial, and associating them with your other data is trivial. In that scenario, you could have laws protecting your privacy but they would be largely performative; in reality, you have lost significant privacy there.
I get where you are coming from, and acknowledge the point that anonymous speech can do considerable harm. That might be better addressed by taking threats and slander more seriously than the legal system currently does.
Perhaps somewhere in the 7 pages someone already mentioned: but it looks like Meta is behind this, presumably to gather more private information?
View: https://www.reddit.com/r/linux/comments/1rshc1f/i_traced_2_billion_in_nonprofit_grants_and_45/
They already have, and they charge $15 - $500 / month for it. It's just not mandatory (yet).all because Meta is lobbying it's ass off so that THEY don't have to implement it.
Indeed, there's no way to prove that via ID alone. Which is why Yoti and similar systems do not rely just on an ID/passport. To get ID/age verified via Yoti et al you need a gov ID, passport or driver's license and a live scan of your face matching your ID picture.Online age checks will forever be illogical and inherently worthless because there's no way to prove that the current user of the device on the other side and the ID they're providing for that check are actually the same person. None. Zero. Nada.
Like I don't even understand how people don't see this. It seems like the most basic logical reasoning to me.
Which is probably why it’s being pushed. And us.gov will buy all that data to “protect” Americans from content that doesn’t fit their worldview.They also make a great harvest of private data to sell to the highest bidder.
Of course it isn’t, never said it wasn’t.Being stalked / doxxed isn't unique to the US...
First, thanks for not jumping on the tiresome blame-the-parents bandwagon.I want to back this up. Used to work in primarily low-income schools. As in 90-97% free and reduced lunch. I worked with a lot of kids who had siblings and single mothers that worked multiple jobs just to keep a roof over their heads and some food on the table. A lot of kids barely see their parent or parents. Or guardians.
It does suck and it's bad for the kids. And it's bad for the adults. And you can rewind as far as you want to say "you shouldn't have had kids then" but that doesn't fix a thing. "Shouldn't have" isn't a workable solution. We have layer after layer of systemic problem that does make parenting and supervision really, really hard. Universal childcare and healthcare would go a long way towards fixing that.
But ultimately, this is the system working as intended to keep the underclass on that edge of precarity. And I get very frustrated with people who should have the context and knowledge to know better continuing to believe it's just a matter of bad parenting.
If they know who you are they will sell and spill all your info.That has nothing to do with what I was responding to though.
In a world with sensible and enforced data privacy laws for instance that wouldn't be an issue. That's entirely separate from anonymity.
The problem isn't that they know who you are, it's that the information on who you are and where you go and what you do is collected and sold.
"In a world with sensible and enforced data privacy laws for instance that wouldn't be an issue."If they know who you are they will sell and spill all your info.
Pfft... that requires:"In a world with sensible and enforced data privacy laws for instance that wouldn't be an issue."
I'm not finding any direct matches, but in general, a vector is a direction and a magnitude. One might encode the age and the other the certainty level.There is no such thing as anage-aware camera, and the marketing term should be quoted to indicate that.
I'm assuming a program is downloaded (how else would it magically appear on the device) and executed. Said program probably takes a photo using a camera and analyses it returning... something.
Next nonsense term, which is at least quoted:vector. I hope it's not a picture of the user converted to a vector graphic... A C++ resizable array? A nickname for a domain specific perceptual hash?
Phone image capture is never a single iteration. So frustrating and will drive customers away! It depends on the camera/software capability (optics, sensor resolution, near focus, low light sensitivity, contrast, image stabilisation, image processing etc). For instance, where the contrast is low or you shake too much and the detection algorithm is very prescriptive or has to err on the side of caution.Indeed, there's no way to prove that via ID alone. Which is why Yoti and similar systems do not rely just on an ID/passport. To get ID/age verified via Yoti et al you need a gov ID, passport or driver's license and a live scan of your face matching your ID picture.
Some verification systems additionally even ask for a video where you need to speak your name, the current date, and mention the service you apply for verification.
If your current face does not match your ID picture the verification will fail. If your ID is old, wrinkled or expired it will also fail. If your webcam is low res, your ID document is glossy, and your lighting's glare obscures anything in the document, the verification will, again, fail - particularly with Yoti.
If you go through a modern age verification system you'll understand intimately how it works, and why it's virtually impossible to fool them. I have gone through many, or else I couldn't get paid. Yoti was the worst by far; it was designed by sadists. LinkedIn's system was the direct opposite. It was a piece of cake to get verified, since they do it via NFC and their mobile app.Phone i
This is pure gold. Also skin-crawling. Maybe satire isn't dead after all.Here's a great post on a Debian mailing list of what an absurd can of worms this is to open. https://lists.debian.org/debian-legal/2026/03/msg00018.html
No, that's like saying "we don't have to worry about AI because it's bad so no one will use it" and then AI got good enough that too many people use it.I think this is the real crux of it. These days applying a voice/face filter can be done on modest hardware, and if that's what it takes to trick these solutions then a bunch of businesses will rush to market with software offering exactly that.
Then these age verification firms will want kernel level access to verify that nothing is altering camera or audio input...
And this is before even considering that the easiest method of bypassing these controls is to simply visit sites or use services that don't implement them. Something which we have absolutely no realistic way to prevent.