News for hackers. Stuff that matters.
Re:Discord's face scanning age checks 'start of a bigger shift' by paxys on Thursday April 17, 2025 @06:03PM (#43722722)
Transferring your age and a way to verify it to any third party is by definition a privacy violation. Doing so in a safe way is literally impossible since I don't want to share that information in the first place.
Re:Discord's face scanning age checks 'start of a bigger shift' by packetlost on Thursday April 17, 2025 @06:11PM (#43722770)
I feel like you could, theoretically, have a service that has an ID (as drivers license ID), perhaps operated by your government, that has an API and a notion of an ephemeral identifier that can be used to provide a digital attestation of some property without exposing that property or the exact identity of the person. It would require that the attestation system is trusted by all parties though, which is I think the core problem.
Re:Discord's face scanning age checks 'start of a bigger shift' by brian-armstrong on Thursday April 17, 2025 @06:44PM (#43723022)
Wouldn't this require the API provider to know that tbe citizen is connecting to the app? Grindr users might be squeamish about letting the current US admin know about that.
Re:Discord's face scanning age checks 'start of a bigger shift' by mschuster91 on Thursday April 17, 2025 @07:00PM (#43723129)
ICAO compliant ID cards (aka passports) and many national ID cards already are smartcards with powerful crypto processors.

Hand out certificates to porn, gambling or whatever sites, that allow requesting the age of a person from the ID card, have the user touch their ID card with their phone to sign a challenge with its key (and certificate signed by the government), that's it.

Government doesn't know what porn site you visited, and porn site only gets the age.

Re:Discord's face scanning age checks 'start of a bigger shift' by packetlost on Thursday April 17, 2025 @09:30PM (#43724050)
Not necessarily, you can define the protocol such that it's all done with opaque IDs instead of identifying info.
Re:Discord's face scanning age checks 'start of a bigger shift' by red_trumpet on Friday April 18, 2025 @02:49AM (#43725647)
This is not only theoretical, the German ID card ("elektronischer Personalausweis") can do exactly this.
Re:Discord's face scanning age checks 'start of a bigger shift' by nonchalantsui on Thursday April 17, 2025 @06:27PM (#43722897)
Do you feel this way when you enter credit card information when making a purchase online?
Re:Discord's face scanning age checks 'start of a bigger shift' by slavik81 on Friday April 18, 2025 @02:47AM (#43725634)
Yes.
Re:Discord's face scanning age checks 'start of a bigger shift' by rlpb on Thursday April 17, 2025 @07:16PM (#43723240)
> Transferring your age and a way to verify it to any third party is by definition a privacy violation.

No it's not. Unless...

> Doing so in a safe way is literally impossible since I don't want to share that information in the first place.

...well then it is.

But it's not constructive to claim that proving your age to someone is by definition a privacy violation. If someone wants to prove their age to someone, then that's a private communication that they're entitled to choose to make.

It is true that if technology to achieve this becomes commonplace, then those not wishing to do so may find it impractical to maintain their privacy in this respect. But that doesn't give others the right to obstruct people who wish to communicate in this way.