logoalt Hacker News

cocotoyesterday at 11:25 PM20 repliesview on HN

The real and robust method will be generating artificial video input instead of the real webcam. I really don’t think any platform will be able to counter this. If they start requiring to use a phone with harder to spoof camera input, you will simply be able to put the camera in front of a high resolution screen. The cat and mouse game will not last long.


Replies

michaelttoday at 12:39 AM

> I really don’t think any platform will be able to counter this.

Do platforms want to counter it?

Seems to me with an unreliable video selfie age verification:

* Reasonable people with common sense don't need to upload scans of their driving licenses and passports

* The platform gets to retain users without too much hassle

* Porn site users are forced to create accounts; this enables tracking, boosting ad revenue and growth numbers.

* Politicians get to announce that they have introduced age controls.

* People who claimed age checks wouldn't invade people's privacy don't get proven wrong

* Teens can sidestep the age checks and retain their access; teens trying to hide their porn from their parents is an age-old tradition.

* Parents don't see their teens accessing porn. They feel reassured without having to have any awkward conversations or figure out any baffling smartphone parental controls.

Everyone wins.

show 6 replies
gclawestoday at 12:16 AM

Don't Windows Hello camera devices have some kind of hardware attestation? I'm sure verification schemes like this will eventually go down that path soon.

My guess is that's probably one of the reasons Google tried to push for Play Store only apps, provide a measurable/verifiable software chain for stuff like this.

show 3 replies
jsheardyesterday at 11:27 PM

They already support ID checks as an alternative to face scanning, if the latter proves to be untenable then it's literally a case of flipping a switch to mandate ID instead.

show 7 replies
zjaffeetoday at 8:42 AM

There's no need to counter it, the whole point is to hit the social aspect of being on these platforms. If even half the kids can't figure out how to make it work, then a massive part of the problem is solved because a much larger percentage are only using it due to network effects.

darth_avocadotoday at 1:39 AM

> The cat and mouse game will not last long.

Yes but for completely different reasons: I will not bother to play the game and stop using the platform.

gnarbariantoday at 12:03 AM

you counter this by using an id verified service like login.gov or okta verify.

That's the endgame and what the EU really wants. No poasting unless they can arrest you for inconvenient memes.

show 2 replies
shevy-javatoday at 4:40 AM

But how many users will do so? 1%? 5%?

Also, they will probably find that out, and the moment people do so, they become suspicious to state actors. I understand the rationale behind the work around you described; I just don't think it will be a huge factor. I see this elsewhere too - for instance, I use ublock origin a lot. But how many people world wide use it? I think never above 30%, most likely significantly fewer (or perhaps all anti-advertisement extensions, I think it most definitely is below 50% and probably below 30% too).

kevinhyesterday at 11:54 PM

Alternatively, hand someone $20 and your phone and have them do the verification for you.

show 1 reply
bob1029today at 12:32 AM

They could do what a bank does and run everyone's ID through chexsystems. It's really hard to defeat this. Fake identities don't exist in the system and stolen ones would get flagged by geographic, time of use and velocity rules.

show 1 reply
TheDongtoday at 1:36 AM

There is an easy solution to this - require a government ID, and only permit government IDs that can be verified with the state's government.

There are a lot of countries and US states where such validation is possible.

Given the state is mandating these checks, it only makes sense that the state should be responsible for making it possible to perform these checks.

show 1 reply
geniiumtoday at 3:44 AM

This is the right question. Who will benefits from blocking young people? Probably not the platform.

nicman23today at 7:19 AM

hardware attestation webcams :) . in the dark future of the 2k there is only windows

qwertoxtoday at 12:19 AM

you put a flickering light, pwm creating artifacts in the video and have it apologize for it, to hopefully break some watermarks. my led light started acting up since yesterday, i have no other bulb.

tjpnztoday at 12:11 AM

Death Stranding 2 photo-mode works well for this.

ddtaylortoday at 12:17 AM

I did this with OBS Virtual Camera for a thing in Oregon and it worked.

lazzlazzlazztoday at 4:27 AM

Apple is believed to be adding multispectral imaging to future generations of the iPhone. This and 3d mapping are more than enough to defeat the "point the camera at a high res screen" trick.

The issue is that age verifiers (like Discord) are not really trying.

toomuchtodoyesterday at 11:42 PM

You require a human to identity proof in real life and bind that to a digital identity with a strong authenticator. Anti fraud detection systems can suspend or ban if evasion attempts are detected. Perfect is not the target, it doesn’t have to be.

See: Login.gov (USPS offline proofing) and other national identity systems.

(digital identity is a component of my work)

show 2 replies
EGregyesterday at 11:31 PM

Actually, there are many ways. For example they change colors on your screen and check in real time how it reflects on your face, eyes, etc. Very hard for a model to be trained to respond this quickly to what's on the screen.

They also have you move your head in multiple directions.

show 1 reply
wiredpancaketoday at 2:31 AM

[dead]