• 1 Post
  • 14 Comments
Joined 1 year ago
cake
Cake day: December 18th, 2023

help-circle

    • You connect to an age-gated site.

    • Your browser receives an age verification request that does not contain information about the site.

    It would contain the time, a random number, and the query: Is user over 18/16/14/whatever?

    • Your browser sends the request to a government-licensed service.

    You identify yourself to that service in some way. The service could also be a program on your own device that uses a chip on your ID-card. If the service confirms the age, it digitally signs the request.

    • Your browser returns the signed request to the age-gated site.

    The site checks if the signature is valid and done. There’s never any connection between the age verification service and the site. If the request is more than a few seconds old, then it will be rejected to prevent sharing.

    Of course, this assumes that sites will cooperate and implement such schemes at their own expense. Obviously(?) that will only be done by the larger sites, so it will be quite pointless. I don’t know why that is not a consideration. Understanding that doesn’t actually require any deep technical knowledge. But that’s typical for EU tech regulation.




  • This is some Orwellian shit right there. This kind of shit is part of the very big problem.

    The hook is a scenario where someone gets doxed.

    Years later, Lina was shocked to find her name and image circulating in far-right forums online.

    There are some murky suggestion that connect this with “migration” or “profiling” but it’s unclear how that would make sense.

    Lina tried to exercise her rights. She filed a data deletion request, but the company refused to comply. Turning to her country’s Data Protection Authority (DPA) for help, she expected a clear path to justice. Instead, she found herself trapped in a bureaucratic maze.

    Indeed. A small forum outside the EU, as such far-right forums typically are, cannot be made to comply with EU law.

    Technologically, scrubbing personal information from the internet is no different from scrubbing information about the Tiananmen Massacre. It can’t be done perfectly, and doing it imperfectly is totalitarian.