- cross-posted to:
- technology@beehaw.org
- cross-posted to:
- technology@beehaw.org
Full title: EU’s new social media child protection rules to require all social media accounts to produce state ID - Leaked documents suggest that some existing accounts will also be subject to identification checks
You must log in or register to comment.
Can they just stop pretending these laws are not about eroding privacy and be honest for ounce.
Imperial units detected
If you give these people 25.4 millimetres they’ll take 1.6 kilometres.
even taking the pretense at face value, this would just be adults damning kids who are queer, autistic and/or in abusive households/communities (among others) and patting themselves on the back
always scrambling to “protect” kids without ever considering their needs or why they engage in the behavior they do at all
(assuming they’re not just seen as defective goods to be either “corrected” or disposed of, of course)
Eliminating online privacy has always been framed as “protecting children” and it’s always been 100% about surveillance
I mean, why are they not using these resources to tackle child poverty, prosecute the epstein list or the panama papers if they want to help children so fucking badly?
Bingo!
The framework is anonymous and open source.
Even if it’s secure (no software is ever 100% secure), it can’t be anonymous. How could they verify your ID? Maybe they theoretically don’t store the record, and the checks after the first don’t provide it, it can’t be anonymous or it’s worthless for ID verification.
That’s the cool part, they found a way to keep it anonymous and still be ID verification, it’s called a white card, a simple yes or no if you’re 18+, it’s like you get a simple white card from a verified institution like a bank saying you’re 18+ with no other information like… How is that not anonymous?
Search for zero-knowledge proof, and the techniques behind it
Whatsapp is less safe than this
Sources for ZKP: https://ageverification.dev/av-doc-technical-specification/docs/annexes/annex-B/annex-B-zkp/ https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm Vulnerabilities: https://www.encryptionconsulting.com/education-center/what-is-ecdsa/ [Api2025] Rutchathon Chairattana-Apirom, Franklin Harding, Anna Lysyanskaya, and Stefano Tessaro, “Server-Aided Anonymous Credentials,” available at https://eprint.iacr.org/2025/513, 2025Sounds too good to be true. … But, if it’s as you say… sure, lets use it to let pedos know where to target. Oh, sorry, I mean, use it to “protect children”.
If I’m understanding it correctly, and I’m pretty sure I am, it requires a witness, like I said. That witness has to be trusted to not reveal any information. The receiver doesn’t get any information theoretically, but it requires that someone check your ID. That’s pretty obvious though because how else could it work?
You mean a system that automatically checks it? Your bank already has that data so its not a person or something
EU’s new social media
child protectionstate surveillance rules to require all social media accounts to produce state IDFTFY
How else is Mrs. von der Leyen supposed to sue people that speak badly about EU politicians?
If she wasn’t corrupt and incompetent people wouldn’t say that about her, so maybe she should improve her bad reputation or step down as incompetent supreme.
You’re talking about someone that had her floor in the EU building fortified, only allowing access for a few selected people. Does that look like she intends to improve her reputation to you?
Well if everyone’s identity is stolen then I guess your identity will mean nothing.
That stuff would 100% get leaked and ruin many lives. Hell it would ruin lives even if only authorized authorities have access to it because some perverted cops or politicians will abuse it to stalk women and children. They‘re already doing it but getting a live feed of someone’s online activity by typing in a single number makes it so much more convenient for bad actors. And it would also get leaked on top of it.
Leak what? Nobody at any point stores any documents and you would know that if any of you read the OPEN SOURCE framework the EU developed.
It’s not about storing documents but about privacy. Do you want police officer in front your doors that checks identity of people that come to your house to talk with you ?
How does the police officer know its you and where you live lmao? that’s not how it works… the state ID produces a yes or no if you’re older than 18 which can’t be tracked, a yes or no has no information about the user… So a police officer can never know it was you lol what. Research zero-knowledge proof and the techniques behind it
Sources for ZKP: https://ageverification.dev/av-doc-technical-specification/docs/annexes/annex-B/annex-B-zkp/ https://en.wikipedia.org/wiki/Elliptic_Curve_Digital_Signature_Algorithm Vulnerabilities: https://www.encryptionconsulting.com/education-center/what-is-ecdsa/ [Api2025] Rutchathon Chairattana-Apirom, Franklin Harding, Anna Lysyanskaya, and Stefano Tessaro, “Server-Aided Anonymous Credentials,” available at https://eprint.iacr.org/2025/513, 2025a yes or no has no information about the user
Ok so imagine you have tablet on your door and anyone that can enter have valid signature stored but not on tablet but on police servers. Now guests are entering signatures on your tablet, that signature is then sent to the police server that accepts them or not and opens the doors as they wish.
This will just push the actual criminals further underground, while everyone else gets spied on. lose-lose.
Ironically, kids might still get around the new restriction by using a virtual private network (VPN) connection, which virtually positions the computer in another country, at the time of signing up.
This is just going to be one long pointless game of whackamole and as effective as Prohibition was in the US.
The US claim they are going after the VPN companies now too. Of course it could be all lies and deflection like most things they say now.
That’s nonsense, VPN is tool needed to run companies. Even if they make VPNs business only, people will just register fake businesses
There is no such thing as “fake business”. The point is that the government identifies you when you want to use a VPN, so it’s either gonna be through your personal ID or through a business where you also register with the government and then they obviously also know your identity.
By fake I mean business which officially registered but effectively does nothing, files 0 profit tax forms and pays just enough fees to keep it formally open. It doesn’t hide your identity from government but it does allow you to access content via countries where there is no age verification thus companies don’t get your id
It’s not just about business use, but citizen access to content. I looked it up and this is the stage it’s at now https://gizmodo.com/the-first-us-law-targeting-vpn-use-takes-effect-september-3-heres-what-happen-2000805001
The new law is narrow. VPN companies say they can’t do it. Fines for businesses that don’t are real. It’s all a little strange.
Very few people will set up their own business or technical venture, though. That’s enough to have a chilling effect.
Ursula von der Leyen, making the internet progressively worse year by year. Cookie banners, GDPR consent dialogs, and now ID verification. Please just retire and take up a different hobby, like knitting.
Neither Cookie banners nor GDPR consent dialogs need to be bad. They are only bad because companies try to do their shit. It’s companies not regulation that make Cookie banners and GDPR consent dialogs bad.
That said, the id-verification stuff is just pure awful for privacy concerns.
Bullshit. They are bad because EU legislation is written by incompetent and/or corrupt (pick one) morons and accordingly full of loopholes. It would have been trivial to order web sites to respect browser ‘do not track’ settings.
I’m always ready for some ursula blaming but the first two are really not the fault of the law. majority of the companies “comply” maliciously, often also illegally, to make people hate privacy laws
Great, this might actually kill centralized social media in a long run. Future generations will grow up on decentralized web because it will be the only one they can access.
So Orwellian.
Yeah, no.
Honestly? State ID is better than the current solution which is giving Thiel-affiliated companies photo and other data.
Ideally I’d rather have a governments provided digital ID that’s more secure and just gives the company limited metadata instead of full ID info provided from gov’t to company. Put in rules requiring warrants or subpoenas for lookups.
Who do you think is checking those ids? Hint: it’s not the government, it’s some 3rd party company, always.
With cryptographic systems like the EU uses, it must go through the government because a 3rd party can’t implement that verification/response pattern without access to the proper gov’t cryptographic secrets.
Did you at any point actually read the open-source, anonymous age-verfication framework to be used by the EU?
Yes, I did and I really do not like that they are using PlayIntegrity for Android phones. That forces everybody in the EU onto unrooted phones which are controlled by google and will kill GrapheneOS and other alternatives.
https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/133
deleted by creator
People are morons. Here we have an open source and anonymous framework for age-verifcation (free for anyone to read and check the source code: https://ageverification.dev/) developed by a people’s institution and people lump it into the same boat as some private USA company photocopying your ID.
People can be morons, but at least they’re not authority cocksuckers!
That’s always a fun 3 fingers to double check on. May reveal some insidious “not even wrong” fallacy that’s not easy to see when too close to it, immersed in it.
EU being shitty as always.
