logoalt Hacker News

engelo_byesterday at 11:23 PM3 repliesview on HN

the cat-and-mouse game of digital age verification is such a massive compliance headache. if these guards are this easy to bypass the platforms are basically just checking a box to satisfy regulators while leaving the actual liability wide open. it’s hard to underwrite trust when the verification layer is this brittle.


Replies

extraduder_iretoday at 9:43 AM

I prefer if it's pretty easy to bypass, if it's going to be law at all. My favourite example of this so far is how bluesky handles it.

https://gist.github.com/mary-ext/6e27b24a83838202908808ad528...

The official app/client is 100% legally compliant in its unmodified state. But doing something like using another client, having your PDS say you're age verified, or using a ublock origin rule to change where the geolocation API thinks you are completely sidestep it.

consumer451yesterday at 11:33 PM

There is a way to do this, where nearly everyone is fine.[0]

However, the orgs don’t get to capture verified adult user identity to pad the value of their user data profiles…

[0] https://blog.google/company-news/inside-google/around-the-gl...

show 1 reply
tentacleunoyesterday at 11:32 PM

It was never going to be perfect. I suspect the goal with things like these is to add additional friction to the process, to make it much harder for the general population to bypass them.