Top
Best
New

Posted by shaicoleman 17 hours ago

Meta Platforms: Lobbying, dark money, and the App Store Accountability Act(github.com)
1169 points | 483 commentspage 6
Aunche 11 hours ago|
Am I the only person who recognized that this bill explicitly does not require any sort of id verification? The point is to make apps and websites more accountable.
fredgrott 12 hours ago||
If we want really a set up where a child does not access it...

Psychology has a higher success rate...just tell them that their parents use it....

There are many systems where accuracy is loose and that is its core feature...for example postal addresses worldwide...I can a mistake in the address but the letter or package will still get there...

b112 16 hours ago||
How much do you want to bet that Amutable, via its founder's control of the systemd codebase and ability to drive change, will be first-in-line to force a switch to its variant of systemd, along with a module for age verification?

I don't see it as coincidence that with all these laws passing, suddenly he announces a secure, "controlled", "locked down" version of systemd. Why, RedHat and Ubuntu can simply drop in this new variant, pay a small fee, and be done with compliance.

npn 13 hours ago||
Now it is only age verification. Next they will try to impose digital ID.

That's when you know the new world has begun.

NoImmatureAdHom 14 hours ago||
Where do I donate to oppose this bullshit?

I want to open my wallet. It should be the top comment.

casey2 11 hours ago|
Donate a phone call. You aren't gonna win the bribing war against people who own a machine that turns your worthless data into millions of dollars.

If everybody who cared to and lived in the affected districts called they would kill the bill just to clear their phone-lines.

close04 16 hours ago||
This truly is the best democracy money can buy. As long as money and/or favors change hands in exchange for getting favorable laws passed, it's just legalized bribery and buying off your own "democracy".

And it snowballs, the more favorable laws someone buys, the more favorable their position, and the more they can buy in the future. The transition from "democratic facade" to "outright oligarchy" will be swift and seamless.

jwr 16 hours ago||
I am now waiting for Gruber (daringfireball.net) to post another rant about how terrible EU regulation is.

Zero-knowledge proofs are the way to go for this type of thing, I find it mind-boggling that the US lets itself be bamboozled into complete lack of privacy.

cosmos0072 16 hours ago||
I am from EU, and contrary to age verification laws in general.

My stance is that if somebody is a minor, his/her/their parents/tutors/legal guardian are responsible for what they can/cannot do online, and that the mechanism to enforce that is parental control on devices.

Having said that, open-source zero-knowledge proofs are infinitely less evil (I refuse to say "better") than commercial cloud-based age monitoring baked into every OS

heavyset_go 15 hours ago|||
> Having said that, open-source zero-knowledge proofs are infinitely less evil (I refuse to say "better") than commercial cloud-based age monitoring baked into every OS

To be honest, I worry that the framing of this legislation and ZKP generally presents a false dichotomy, where second-option bias[1] prevails because of the draconian first option.

There's always another option: don't implement age verification laws at all.

App and website developers shouldn't be burdened with extra costly liability to make sure someone's kids don't read a curse word, parents can use the plethora of parental controls on the market if they're that worried.

[1] https://rationalwiki.org/wiki/Appeal_to_the_minority#Second-...

ndriscoll 14 hours ago|||
> App and website developers shouldn't be burdened with extra costly liability

Why not? Physical businesses have liability if they provide age restricted items to children. As far as I know, strip clubs are liable for who enters. Selling alcohol to a child carries personal criminal liability for store clerks. Assuming society decides to restrict something from children, why should online businesses be exempt?

On who should be responsible, parents or businesses, historically the answer has been both. Parents have decision making authority. Businesses must not undermine that by providing service to minors.

Ray20 13 hours ago|||
> Why not?

This implies the creation of an infrastructure for the total surveillance of citizens, unlike age verification by physical businesses.

ndriscoll 13 hours ago|||
Spell it out: how do ID checks for specific services (where the laws I've read all require no records be retained with generally steep penalties) create an infrastructure for total surveillance? Can't sites just not keep records like they do in person and like the law mandates? Can't in-person businesses keep records and share that with whomever you're worried about?

How do you reconcile porn sites as a line in the sand with things like banking or online real estate transactions or applying for an apartment already performing ID checks? The verification infrastructure is already in place. It's mundane. In fact the apartment one is probably more offensive because they'll likely make you do their online thing even if you could just walk in and show ID.

pixl97 13 hours ago||
>create an infrastructure for total surveillance

I mean, we're talking about age verification in the OS itself in some of these laws, so tell me how it doesn't.

Quantity is a quality. We're not just seeing it for porn, it's moving to social media in general. Politicians are already talking about it for all sites that allow posts, that would include this site.

So you tell me.

ndriscoll 13 hours ago||
App and website developers having liability is an alternative to OS controls. Mandatory OS controls are OS/device manufacturers having liability. I agree that's a poor idea, and actually said as much like a year ago pointing out that this California bill was the awful alternative when people were against bills like the one from Texas. It's targeting the wrong party and creates burdens on everyone even if you don't care about porn or social media.
heavyset_go 12 hours ago||
No, in the CA law OS controls are part and parcel with app and website developer liability.
ndriscoll 12 hours ago||
They're separate concepts. Clearly, obviously, mandating OS controls is creating liability for OS providers, not service operators. Other states do liability for providers without mandating some other party get involved.

California is also stupid for creating liability for service/app providers that don't even deal in age restricted apps, like calculators or maps. It's playing right into the "this affects the whole Internet/all of computing" narrative when in fact it's really a small set of businesses that are causing issues and should be subject to regulation.

gzread 11 hours ago|||
Knowing if the user's over 18 doesn't imply total surveillance, it only implies a user profile setting that says if they're over 18.
vaylian 10 hours ago|||
It implies that the user has access to the technical infrastructure that supports age verification. Sucks to be you, if you can't afford a recent Apple or Android device to run the AgeVerification app.

There is also the problem of mission creep. Once the infrastructure is in place, to control access to age-restricted content, other services might become out of reach. In particular, anonymous usage of online forums might no longer be possible.

gzread 10 hours ago||
That technical infrastructure: a drop-down menu on the user's account settings
Magnusmaster 6 hours ago||
The EU Digital Wallet requires hardware attestation so only it only works on locked-down government-approved OSes. That opens the door for government control of all electronic devices.
gzread 4 hours ago||
What a shame. The California one is just an input box.
pc86 11 hours ago|||
Do you know what the word "infrastructure" means?
gzread 10 hours ago||
Do you know what "total surveillance" means? It doesn't mean a checkbox for over 18
pc86 10 hours ago||
I can't tell if this is a troll or not.

OS-level ability to verify the age of the person using it absolutely provides infrastructure for the OS to verify all sorts of other things. Citizenship, identity, you name it. When it's at the OS level there's no way to do anything privately on that machine ever again.

gzread 10 hours ago||
I agree that a checkbox for if the user is over 18 opens the door to a checkbox for if the user is a citizen and even a textbox for the user's full name (which already exists on Linux so you better boycott Debian now!). I don't see how such input fields are "total surveillance".
MonkeyClub 13 hours ago||||
> Physical businesses have liability if they provide age restricted items to children.

Ok, suppose the strip club is the website, and the club's door is the OS.

Would you fine the door's manufacturer for teens getting into the strip club?

jerf 12 hours ago|||
Dueling physical analogies is never a productive way to resolve a conversation like this. It just diverts all useful energy into arguing about which analogy is more accurate but it doesn't matter because the people pushing this law don't care about any of them and aren't going to stop even if the entire internet manages to agree about an analogy. This needs to be fought directly.
johnnyanmac 10 hours ago||
>This needs to be fought directly.

How do we fight? It seems like agree or disagree, this isn't going to stop. There's so much money behind it in a time where the have nots can barely survive as is.

ndriscoll 12 hours ago|||
The OS is not the club's door. The OS is unrelated. The strip club needs to hire someone to work their door and check ID, not point at an unrelated third party. They should have liability to do so as the service provider.
MSFT_Edging 14 hours ago||||
> Physical businesses have liability if they provide age restricted items to children.

These are often clear cut. They're physical controlled items. Tobacco, alcohol, guns, physical porn, and sometimes things like spray paint.

The internet is not. There are people who believe discussions about human sexuality (ie "how do I know if I'm gay?") should be age restricted. There are people who believe any discussion about the human form should be age restricted. What about discussions of other forms of government? Plenty would prefer their children not be able to learn about communism from anywhere other than the Victims of Communism Memorial Foundation.

The landscape of age restricting information is infinitely more complex than age restricting physical items. This complexity enables certain actors to censor wide swaths of information due to a provider's fear of liability.

This is closer to a law that says "if a store sells an item that is used to damage property whatsoever, they are liable", so now the store owner must fear the full can of soda could be used to break a window.

ndriscoll 14 hours ago|||
That's not a problem of age verification. That's a problem of what qualifies for liability and what is protected speech, and the same questions do exist in physical space (e.g. Barnes and Noble carrying books with adult themes/language).

So again, assuming we have decided to restrict something (and there are clear lines online too like commercial porn sites, or sites that sell alcohol (which already comes with an ID check!)), why isn't liability for online providers the obvious conclusion?

MSFT_Edging 13 hours ago||
> That's a problem of what qualifies for liability and what is protected speech

The crux is we cannot decide what is protected speech, and even things that are protected speech are still considered adult content.

> why isn't liability for online providers the obvious conclusion?

We tried. The providers with power and money(Meta) are funding these bills. They want to avoid all liability while continuing to design platforms that degrade society.

This may be a little tin-foil hat of me, but I don't think these bills are about porn at all. They're about how the last few years people were able to see all the gory details of the conflict in Gaza.

The US stopped letting a majority of journalists embed with the military. In the last few decades it's been easier for journalists to embed with the Taliban than the US Military.

The US Gov learned from Vietnam that showing people what they're doing cuts the domestic support. I've seen people suggesting it's bad for Bellingcat to report on the US strike of the girls school because it would hurt morale at home.

The end goal is labeling content covering wars/conflicts as "adult content". Removing any teenagers from the material reality of international affairs, while also creating a barrier for adults to see this content. Those who pass the barrier will then be more accurately tracked via these measures.

gzread 11 hours ago||||
However there are also parts of the internet that are clear cut, like porn.
MSFT_Edging 10 hours ago||
What about nude paintings/photography that aren't made with erotic intent?

Anatomical reference material for artists with real nude models?

What about Sexual education materials? Medical textbooks?

Women baring their breasts in NYC where it's legal?

Where is the clear cut line of Pornography? At what point do we say any depiction of a human body is pornographic?

gzread 4 hours ago||
Some things being unclear doesn't mean all things are unclear.
NoMoreNicksLeft 12 hours ago|||
>Plenty would prefer their children not be able to learn about communism

Plenty of people would prefer that children not learn about scientology from pro-scientology cultists too. It's not that they can't know about scientology (they probably should, in fact, because knowledge can have an immunizing effect against cults)...

And it's not that they can't know about communism (they probably should, in fact, because knowledge can have an immunizing effect against cults)...

MSFT_Edging 10 hours ago||
Would you also be against learning about Capitalism from the Heritage foundation?

This is a comment section about large corporations lobbying against our ability to freely use computers and you break out the 80's cold war propaganda edition of understanding a complicated economic system that intertwines with methodology for historical analysis with various levels of implementations from a governmental level.

You're either a mark or trying to find a mark.

inetknght 13 hours ago||||
> Physical businesses

Physical businesses nominally aren't selling their items to people across state or country borders.

Of course, we threw that out when we decided people could buy things online. How'd that tax loophole turn out?

ndriscoll 13 hours ago||
But when they do, federal law requires age verification (at least with e.g. alcohol).

It turned out we pretty much closed the tax loophole. I don't remember an online purchase with no sales tax since the mid 00s.

scythe 13 hours ago|||
For one thing, it's fairly uncommon for children to purchase operating systems. As long as there is one major operating system with age verification, parents (or teachers) who want software restrictions on their children can simply provide that one. The existence of operating systems without age verification does not actually create a problem as long as the parents are at least somewhat aware of what is installed at device level on their child's computer, which is an awful lot easier than policing every single webpage the kid visits.
ndriscoll 13 hours ago|||
So I agree that operating systems and device developers should not be liable. That's putting a burden on an unrelated party and a bad solution that does possibly lead to locked down computing. I meant that liability should lie with service providers. e.g. porn distributors. The people actually dealing in the restricted item. As a role of thumb, we shouldn't make their externalities other people's problems (assuming we agree that their product being given to children is a problem externality).
gzread 11 hours ago|||
What if all the useful apps refuse to run on the childproof operating system?
scythe 9 hours ago|||
I think the market is pretty good at situations like that.
anthk 11 hours ago|||
Then ditch propietary software completely and join free as freedom OSes.
Bender 14 hours ago||||
App and website developers shouldn't be burdened with extra costly liability to make sure someone's kids don't read a curse word, parents can use the plethora of parental controls on the market if they're that worried.

App and website operators should add one static header. [1] That's it, nothing more. Site operators could do this in their sleep.

User-agents must look for said header [1] and activate parental controls if they were enabled on the device by a parent. That's it, nothing more. No signalling to a website, no leaking data, no tracking, no identifying. A junior developer could do this in their sleep.

None of this will happen of course as bribery (lobbying) is involved.

[1] - https://news.ycombinator.com/item?id=46152074

rectang 10 hours ago||||
Practically, instead of requiring that sites verify age, require that they serve adult content with standardized headers. Devices can then be marketed as "child-safe" which refuse to display content with such headers.
mindslight 13 hours ago||||
ZKP methods are just as draconian as they rely on locking down end user devices with remote attestation, which is why they're being pushed by Google ("Safety" net, WEI, etc).

The real answer to the problem is for websites/appstores to publish tags that are legally binding assertions of age appropriateness, and then browsers/systems can be configured to use those tags to only show appropriate content to their intended user.

This also gives parents the ability to additionally decide other types of websites are not suitable for their children, rather than trusting websites themselves to make that decision within the context of their regulatory capture. For example imagine a Facebook4Kidz website that vets posts as being age appropriate, but does nothing to alleviate the dopamine drip mechanics.

There has been a market failure here, so it wouldn't be unreasonable for legislation to dictate that large websites must implement these tags (over a certain number of users), and that popular mobile operating systems / browsers implement the parental controls functionality. But there would be no need to cover all websites and operating systems - untagged websites fail as unavailable in the kid-appropriate browsers, and parents would only give devices with parental controls enabled to their kids.

Terr_ 10 hours ago||
> The real answer to the problem is for websites/appstores to publish tags that are legally binding assertions of age appropriateness, and then browsers/systems can be configured to use those tags to only show appropriate content to their intended user.

Agreed, recycling a comment: on reasons for it to be that way:

___________

1. Most of the dollar costs of making it all happen will be paid by the people who actually need/use the feature.

2. No toxic Orwellian panopticon.

3. Key enforcement falls into a realm non-technical parents can actually observe and act upon: What device is little Timmy holding?

4. Every site in the world will not need a monthly update to handle Elbonia's rite of manhood on the 17th lunar year to make it permitted to see bare ankles. Instead, parents of that region/religion can download their own damn plugin.

mindslight 10 hours ago||
Good list of more reasons! I focused on what I consider the two most important.

To expand on your #3, it also gives parents a way to have different policies on different devices for the same child. Perhaps absolutely no social media on their phone (which is always drawing them, and can be used in private when they're supposed to be doing something else), but allowing it on a desktop computer in an observable area (ie accountability).

The way the proposed legislation is made, once companies have cleared the hurdle of what the law requires, parents are then left up to the mercy of whatever the companies deem appropriate for their kids. Which isn't terribly surprising for regulatory capture legislation! But since it's branded with protecting kids and helping parents, we need to be shouting about all the ways it actually undermines those goals.

verisimi 15 hours ago||||
> There's always another option: don't implement age verification laws at all.

Where do you go to vote for this option?

andrepd 13 hours ago|||
The concern is ubiquitous all-pervasive surveillance, control, and manipulation of algorithmical social media and its objective consequences for child development and well-being. Not "kids reading a bad word". Disagree all you want, but don't twist the premise.

Surely you can find a rationalwiki article for your fallacy too.

ori_b 13 hours ago|||
If you want to avoid all pervasive surveillance, it might be wise to not mandate all pervasive surveillance in the OS by law.

In fact, I suspect adults, and not just children, would also appreciate it if the pervasive surveillance was simply banned, instead of trying to age gate it. Why should bad actors be allowed to prey on adults?

gzread 10 hours ago||
Luckily some of these laws, which we're rallying against, make it illegal to pervasively surveil.
ori_b 10 hours ago||
I must have missed that. Which of them prevent pervasive data collection on all ages?
gzread 4 hours ago||
The California age input law says that the OS shall not give more data than necessary.
ori_b 3 hours ago||
And what are the consequences for application vendors that collect more information, including after the age is collected?
johnnyanmac 10 hours ago||||
>Disagree all you want, but don't twist the premise.

The 2 billion dollars are the one twisting it.

heavyset_go 12 hours ago|||
You mean the same social media companies that want this legislation and wrote it themselves? The same legislation that introduces more surveillance and tracking for everyone, including kids?

Also, I heard the same thing about video games, TV shows, D&D, texting and even youth novels. It's yet another moral panic.

From the Guardian[1]:

> Social media time does not increase teenagers’ mental health problems – study

> Research finds no evidence heavier social media use or more gaming increases symptoms of anxiety or depression

> Screen time spent gaming or on social media does not cause mental health problems in teenagers, according to a large-scale study.

> With ministers in the UK considering whether to follow Australia’s example by banning social media use for under-16s, the findings challenge concerns that long periods spent gaming or scrolling TikTok or Instagram are driving an increase in teenagers’ depression, anxiety and other mental health conditions.

> Researchers at the University of Manchester followed 25,000 11- to 14-year-olds over three school years, tracking their self-reported social media habits, gaming frequency and emotional difficulties to find out whether technology use genuinely predicted later mental health difficulties.

From Nature[2]:

> Time spent on social media among the least influential factors in adolescent mental health

From the Atlantic[3] with citations in the article:

> The Panic Over Smartphones Doesn’t Help Teens, It may only make things worse.

> I am a developmental psychologist[4], and for the past 20 years, I have worked to identify how children develop mental illnesses. Since 2008, I have studied 10-to-15-year-olds using their mobile phones, with the goal of testing how a wide range of their daily experiences, including their digital-technology use, influences their mental health. My colleagues and I have repeatedly failed to find[5] compelling support for the claim that digital-technology use is a major contributor to adolescent depression and other mental-health symptoms.

> Many other researchers have found the same[6]. In fact, a recent[6] study and a review of research[7] on social media and depression concluded that social media is one of the least influential factors in predicting adolescents’ mental health. The most influential factors include a family history of mental disorder; early exposure to adversity, such as violence and discrimination; and school- and family-related stressors, among others. At the end of last year, the National Academies of Sciences, Engineering, and Medicine released a report[8] concluding, “Available research that links social media to health shows small effects and weak associations, which may be influenced by a combination of good and bad experiences. Contrary to the current cultural narrative that social media is universally harmful to adolescents, the reality is more complicated.”

[1] https://www.theguardian.com/media/2026/jan/14/social-media-t...

[2] https://www.nature.com/articles/s44220-023-00063-7

[3] https://www.theatlantic.com/technology/archive/2024/05/candi...

[4] https://adaptlab.org/

[5] https://pubmed.ncbi.nlm.nih.gov/31929951/

[6] https://www.nature.com/articles/s44220-023-00063-7#:~:text=G...

[7] https://pubmed.ncbi.nlm.nih.gov/32734903/

[8] https://nap.nationalacademies.org/resource/27396/Highlights_...

himata4113 16 hours ago||||
Yes! This is the way, give parents the ABILITY to advertise the users age to browsers, apps and everything in between. Only target cooperations, do not target open source projects. Fine websites for not using this API (ex: porn sites). Assume an adult if not present.
fn-mote 15 hours ago|||
> Fine websites for not using this API (ex: porn sites).

Recent posters here are clear that porn sites are setting every available signal that they are serving adult-only content.

According to them, you are targeting the wrong audience.

Facebook/Instagram studying how to get young users addicted should be of greater concern. I have my doubts about the effectiveness of age-based blocking there, though.

troyvit 12 hours ago|||
> Facebook/Instagram studying how to get young users addicted should be of greater concern. I have my doubts about the effectiveness of age-based blocking there, though.

Yeah quite the opposite. Once they have that formalized attestation they will move in like sharks.

edgyquant 15 hours ago|||
Both are problems, porn sites have also targeted children and any non-enforced age “verification” on these sites is simply plausible deniability that isn’t plausible at all
XorNot 13 hours ago||
In what way have porn sites targeted children? They have no disposable income to target and the product is literally self age gated in appeal.
fivetomidnight 15 hours ago||||
No. This is not the way.

> give parents the ABILITY to advertise the users age to browsers, apps and everything in between.

Accounts and Applications to services that provide countent are set to a country-specific age rating restrictions (PG, 12+, 18+, whatever). That's it.

None of the things you mentioned have any point to concern themself with the age or age-bracket of the user in front of the device. This can and will be abused. This is very obvious. Think about it.

ryandrake 12 hours ago|||
Why should the applications get to decide if they are appropriate for a particular age? Shouldn't that be up to the parent? I shouldn't need to tell my kid: "Well, to use this compiler software, you need to set your age to 18 temporarily, because some product manager 3,000 miles away decided to rate it 18+. But, set it back to age 13 afterwards because you shouldn't be on adult sites." It's stupid.
himata4113 14 hours ago|||
That is what I meant by age(-rating), you are correct. However, drop country specifics - too complicated. Age brackets are enough: child, preteen, teen, adult. At around 16-17 these should be dropped anyway since at that point people are smart enough to get around these measures anyway and usually have non-parent controlled devices.
idiotsecant 16 hours ago||||
This is a great solution to the stated problem. The issue is that nobody is actually trying to solve the stated problem. This is a terrible solution to the real 'problem' which is the lack of surveillance power and information control.
simion314 15 hours ago|||
>This is a great solution to the stated problem. The issue is that nobody is actually trying to solve the stated problem. This is a terrible solution to the real 'problem' which is the lack of surveillance power and information control.

So on the Sony consoles I created an account for my child and guess what they have implemented some stuff to block children from adult content on some stuff.

So if Big Tech would actually want to prevent laws to be created could make it easy for a parent to setup the account for a child (most children this days have mobile stuff and consoles so they could start with those), we just need the browsers to read the age flag from the OS and put it in a header, then the websites owners can respect that flag.

I know that someone would say that some clever teen would crack their locked down windows/linux to change the flag but this is a super rare case, we should start with the 99% cases, mobile phones and consoles are already locked down so an OS API that tells the browser if this is an child account and a browser header would solve the issue, most porn websites or similar adult sites would have no reason not to respect this header , it would make their job easier then say Steam having to always popup a birth date thing when a game is mature.

necovek 14 hours ago|||
When one clever teen figures it out, they will share it with 80% of their friend group, making that number 80% and not 1%.

Let's go back to parenting: yes, world is a scary place if you get into it unprepared.

gzread 14 hours ago|||
When one teen figures out how to get alcohol without ID, 80% of them will.
necovek 49 minutes ago||
From https://www.edgarsnyder.com/resources/underage-drinking-stat...:

  > Nearly 75% of 12th grade students...have consumed alcohol in their lifetimes.
and

  > 85 percent of 12th graders ... say it would be “fairly easy” or “very easy” for them to get alcohol.
So, yes?
fsflover 11 hours ago|||
100% law enforcement is harmful: https://news.ycombinator.com/item?id=47352848
himata4113 15 hours ago|||
That's why I suggested kernel enforced security (simple syscall) that applications could implement and are incredibly hard to spoof / create tools and workarounds for, but I got downvoted to hell.

Permission restricted registry entry (already exists) and a syscall that reads it (already exists) for windows and a file that requires sudo to edit (already exists) and a syscall to read it (already exists). Works on every distro automatically as well including android phones since they run the linux kernel anyway. Apple can figure it out and they already have appleid.

simion314 14 hours ago||
For linux we have the users and groups concept, the distro can add an adult group and when you give your child a linux a device and create the account you would just chose adulr or minor , or enter a birthdate. No freedom lost for the geeks that install Ubuntu or Arch for themselves and we do not need some extra hardware for the rare cases where a child has access to soem computer and he also can wipe it and install Linux on it. Distro makes can make the live usb default user to be set as not adult. Good enough solutions are easy but I do not understand why Big Tech (Google and Apple) did not work on a standard for this. (maybe both Apple and Google profits would suffer if they did)
himata4113 14 hours ago||
Definitely the latter, exploiting kids (roblox) is very very profitable.
gzread 15 hours ago|||
Three states now implement this solution that you just called a great solution, and most of HN still hates it. Are they seeing something that you're not? https://news.ycombinator.com/item?id=47357294
idiotsecant 13 hours ago||
Psst I was talking about zero knowledge proofs. Read twice before talking.
gzread 12 hours ago||
Can't see where you said that. You definitely commented about parental controls.
mijoharas 15 hours ago|||
This is what I think. I saw someone else on HN suggested provide an `X-User-Age` header to these sites, and provide parents with a password protected page to set that in the browser/OS.

Responsibility should be on the website to not provide the content if the header is sent with an inappropriate age, and for the parent to set it up on the device, or to not provide a child a device without child-safe restrictions.

It seems very obviously simple to me, and I don't see why any of these other systems have gained steam everywhere all of a sudden (apart from a desire to enhance tracking).

qup 14 hours ago||
Seems simple until you try to figure out what's allowed for what age, which surely will differ by country at a minimum.
module1973 13 hours ago||||
that is correct the parents are meant to pass on morals and parent the child. If the parents fall through, there is the community such as church, neighbors, schools etc. The absolute last resort is government or law enforcement intervention, and this should be considered an extreme situation. But as John Adams noted, "Our Constitution was made only for a moral and religious people" -- in other words, all these laws start to rip at the seams when the fabric of society, the people who make up the society no longer have morals. But I appreciate this article in general, we need to fight against mass surveilance at all costs.
pixl97 13 hours ago||
>all these laws start to rip at the seams when the fabric of society, the people who make up the society no longer have morals

Morals like owning slaves, right?

A moral system that requires everyone to be white Christian males isn't a moral system, it's a theocracy.

teekert 15 hours ago||||
"mechanism to enforce that is parental control on devices."

Meh, I use it, but it's super annoying and I think that with my Daughter I'll take a different approach (but it will be some years before that is relevant).

On Android: The kid can easily go on Snapchat (after approval of install of course, and then you can just see their "friends") before Pokemon Go (just a pain to get working, it keeps presenting some borked version which led to a lot of confusion at first). I just lied about his age in a bunch of places at some point. Snapchat is horrible and sick from our experiences in the first week.

On Windows: It's a curated set of websites (and no FireFox) or access to everything. It's not even workable for just school. Granting kids access to our own minercraft servers: My god, I felt dirty about what the other parents had to go through to enable that.

epiccoleman 13 hours ago||
> Granting kids access to our own minercraft servers: My god, I felt dirty about what the other parents had to go through to enable that.

This is a hobby horse of mine to the point that coworkers probably wish I'd just stfu about Minecraft - but holy shit is it crazy how many different things you need to get right to get kids playing together.

I genuinely have no idea how parents without years of "navigating technical bullshit" experience ever manage to make it happen. Juggling Microsoft accounts, Nintendo accounts, menu-diving through one of 37 different account details pages , Xbox accounts, GamePass subscriptions - it's just fucking crazy!

teekert 12 hours ago||
I always wonder about this. I read most dialogs (as I do) but man, the sanity of most people must require that they just next next next this stuff right? Perhaps they even let their kids do it instead.
bcrosby95 10 hours ago|||
If you're using something like a fire tablet and you set them up as a kids account that's not how it works. If you next through everything your kid cannot play minecraft online, not even on your own little private server.

Getting an actual kids account to work online with minecraft involves setting the right permissions across 2-4 websites and 1-3 companies. I think it took me around 4 hours of trial and error to get it working.

epiccoleman 8 hours ago|||
I might be wrong about this, but at least in my experience you just can't "next next next." There's too much complexity!

I'm essentially the maintainer of a series of accounts for each kid, these days. Woe unto anyone without a password manager!

tasuki 16 hours ago||||
> My stance is that if somebody is a minor, his/her/their parents/tutors/legal guardian are responsible for what they can/cannot do online

As a parent, sure, that is my stance as well. What... what other stances are there even? How would they work?

pjc50 15 hours ago|||
The steelman argument is that parents are not necessarily up to date on the technology, and cannot reasonably be expected to supervise teenagers 24/7 up to the age of 18. Compare movie ratings or alcohol laws, for example: there's a non-parental obligation on third parties not to provide alcohol to children or let them in to R18 showings.

But the implementation matters, and almost all of these bills internationally are being done in bad faith by coordinated big-money groups against technologically illiterate and reactionary populist governments.

(if we really want to get into an argument, there's what the UK calls "Gillick competence": the ability of children to seek medical treatment without the knowledge and against the will of their parents)

graemep 14 hours ago|||
In the UK parents can give children alcohol below the age of 18. parents get to make the final decision at home so I do not think its really comparable.

I would personally favour allowing parents to buy drinks for children below the current limits (18 without a meal, 16 for wine, beer and cider with a meal).

The alternative to this is empowering parents by regulating SIM cards (child safe cards already exist) and allowing parents to control internet connectivity either through the ISP or at the router - far better than regulating general purpose devices. The devices come with sensible defaults that parents can change.

Mchat22 10 hours ago||
[dead]
_heimdall 15 hours ago|||
That steelman still stands on a core assumption that its both the state's responsibility and right to step in and parent on everyone's behalf.

Maybe a majority of people today agree with that, but I know I don't and I never hear that assumption debated directly.

gzread 14 hours ago|||
The point of having a state at all is to create a framework where people are set up to succeed.
_heimdall 14 hours ago|||
Where exactly are you getting that goal of a state from? Maybe that's one of the goals today, historically I don't think it was anywhere on the list.
heavyset_go 14 hours ago|||
Everyone shouldn't have to lose their privacy just because you're too lazy to use parental controls or give your kids devices that are made for children.
gzread 14 hours ago||
Entering your child's age when you create their user account is a loss of privacy?
PeterisP 14 hours ago||
The current bills (e.g. NY one at https://www.nysenate.gov/legislation/bills/2025/S8102/amendm... ) require age assurance that goes beyond mere assertions, so when creating your (adult) user account it would be required to give away your privacy to prove your age - if you can't implement a way for anonymous/pseudonymous people to verify that they indeed are adults (and not kids claiming to be so), these bills prohibit you to manufacture internet-connected systems that can be used by anonymous/pseudonymous users.
gzread 12 hours ago||
We are also talking about the Illinois one, which doesn't do that
antonvs 10 hours ago||||
> I never hear that assumption debated directly.

The idea of the "nanny state" has been debated a lot, and this seems like a very literal example of that. But once some status quo is firmly entrenched, debate about it tends to die down because the majority of people no longer care enough about it.

edgyquant 15 hours ago|||
Then frankly you haven’t seen many debates around age verification as it’s the main thing discussed every time it’s brought up
_heimdall 13 hours ago||
You are correct, I didn't pay close attention to any EU debates that may have happened, I haven't lived there in years. In the US I haven't seen much debate at all, regardless of the bill really we don't seem to have leaders openly and honestly debate anything.
edgyquant 15 hours ago||||
The other stance is that most parents are not capable of winning a battle against tech giants for the mind of their children, just as parents were not capable of winning this fight with tobacco and alcohol companies.
heavyset_go 15 hours ago|||
The tech giants want this. They drafted the bill. They paid tens of millions of dollars to promote it. Think about that for a minute.
hackinthebochs 14 hours ago||
They want it because it absolves them of responsibility for what their app does to kids. They can then just point to the existence of an already working mechanism for parents to intervene. The alternative would be for each app to implement stringent age verification or redesign itself to avoid addictive patterns. Neither option is good for their earnings.
duskdozer 13 hours ago|||
If this had anything to do with reigning in tech giants, it would be done for adults as well, without restricting anyone's rights (well, aside from the people-corporations' of course). The issues are the manipulative algorithmic datafeeds, advertising, and datamining. Age verification does nothing for any of this and only provides the tech giants and governments the means to secure even more control over people.
Markoff 16 hours ago|||
ignore parent, outsource parenting to gov verification authority

TBH many parents done exactly that by giving phones/tablet already to kids in strollers

graemep 14 hours ago||
The latter is true, but we cannot regulate the vast majority of parents on the basis of the worst.
croes 16 hours ago||||
You could make the same case for parental control as evil.

"You‘re reading about evolution! Not in my house"

cosmos0072 16 hours ago||
Parents already have a lot of control on children' education.

Examples: most children believe in the same religion as their parents, and can visit friends and places only if/when allowed by their parents.

This is simply extending the same level of control to the internet.

Government-mandated restrictions are completely another level.

edgyquant 15 hours ago|||
I have personally worked with parents trying to prevent their children from using social media and it’s nearly impossible. Kids are almost always more tech savvy than their parents and unlike smoking it’s nearly impossible to tell a child is doing so without watching them 100% of the time.
croes 16 hours ago|||
Who controls your age if you try to buy alcohol.

Who controls your age if you want to see an R-rated movie?

This is simply extending the same level of control to the internet.

More control for parents is a completely different level.

heavyset_go 15 hours ago|||
There are no laws preventing children from seeing R-rated movies with or without their parents, theaters implement that policy by choice.
jfengel 12 hours ago|||
Sort of by choice. Often, the municipality won't let you build a movie theater unless you pinky-promise to abide by the rating system.

They rarely enforce it, but if it gets out of hand, the city will start getting on your case about it.

croes 15 hours ago|||
Welcome to the world where many countries aren’t the US
heavyset_go 15 hours ago||
The OP is about legislation and companies in the US
croes 14 hours ago||
And parent is from the EU and talks about age control in general.

Does the US have a zero-knowledge proof system that is mentioned in the discussion?

applfanboysbgon 15 hours ago|||
Disingenuous, but I'm sure you know that and were being intentionally so. The government is not using alcohol age laws as a justification to place a camera in your bedroom to make sure you aren't sneaking booze, but it is using internet age laws as a justification to surveil your entire life in a world which is becoming increasingly digital-mandatory to participate in government services or the economy. Nobody had a problem with internet age laws when "are you over 13? yes/no" was legally sufficient.
gzread 14 hours ago|||
Is California doing this?
applfanboysbgon 5 hours ago||
To my understanding no, but California is breaching the rubicon in compelling open-source / non-commercial software developers to include something in their offline software, which is something that I believe has never been done before by any jurisdiction, and opening that floodgate is a clear slippery slope in this environment because the week after that is implemented Texas will be mandating that all operating systems come installed with JesusTracker. Apparently New York is already working on sliding down that slope, in fact, and for good measure wants to mandate anti-circumvention measures too.
croes 15 hours ago|||
You‘re missing the point

> Having said that, open-source zero-knowledge proofs are infinitely less evil (I refuse to say "better") than commercial cloud-based age monitoring baked into every OS

Parent prefers more control by parents over zero-knowledge proof

applfanboysbgon 15 hours ago||
If that was your point, I don't think your previous comment did a very good job of making it at all.

I do think parental controls can be and are abused for evil, but they're still better than the alternative. Zero-knowledge proof is not an alternative, and to suggest that it is is misunderstanding the situation. These laws are proposed and funded by people who want complete surveillance of the population. Zero-knowledge proof is, therefore, explicitly contrary to the goal and will never be implemented under any circumstances. Suggesting that it can be muddies the issue and tricks people into supporting legislation that exists only to be used against them.

In a benevolent dictatorship, sure, go for a zero-knowledge proof verification as your solution. In the reality of democracy, where politicians are corporate puppets who cloak surveillance laws in "think of the children" to rally support from the masses, we need to convince people to see through the lie and reject the proposals outright while reassuring them that they can protect the children themselves via parental controls. You will never be able to sufficiently inform 50.1% of the population of any country of what zero-knowledge proof even means, let alone convince them to support age verification laws but strictly conditional on ZKP requirements. That level of nuance is far too much to ask of millions of people who are not technically-informed, and idealism needs to give way to pragmatism if we wish to avoid the worst-case scenario.

Pxtl 14 hours ago||||
> My stance is that if somebody is a minor, his/her/their parents/tutors/legal guardian are responsible for what they can/cannot do online, and that the mechanism to enforce that is parental control on devices.

Imho there is a place for regulation in that, actually. Devices that parents are managing as child devices could include an OS API and browser HTTP header for "hey is this a child?" These devices are functionally adminned by the parent so the owner of the device is still in control, just not the user.

Just like the cookie thing - these things should all be HTTP headers.

"This site is requesting your something, do you want to send it?

Y/N [X] remember my choice."

Do that for GPS, browser fingerprint, off-domain tracking cookies (not the stupid cookie banner), adulthood information, etc.

It would be perfectly reasonable for the EU to legislate that. "OS and browsers are required to offer an API to expose age verification status of the client, and the device is required to let an administrative user set it, and provide instructions to parents on how to lock down a device such that their child user's device will be marked as a child without the ability for the child to change it".

Either way, though, I'm far more worried about children being radicalized online by political extremists than I am about them occasionally seeing a penis. And a lot of radicalizing content is not considered "adult".

lynx97 15 hours ago||||
Same here, EU citizen who thinks parents should do some parenting, after all. However, try to confront "modern" parents with your position. Many of them will fight you immediately, because they think the state is supposed to do their work... Its a very concerning development.
soulofmischief 14 hours ago|||
I'll go further. As a human being, I am responsible for myself. I grew up in an extremely abusive, impoverished, cult-like religious home where anything not approved by White Jesus was disallowed.

I owe everything about who I am today to learning how to circumvent firewalls and other forms of restriction. I would almost certainly be dead if I hadn't learned to socialize and program on the web despite it being strictly forbidden at home. Most of my interests, politics and personality were forged at 2am, as quiet as possible, browsing the web on live discs. I now support myself through those interests.

We're so quick to forget that kids are people, too. And today, they often know how to safely navigate the internet better than their aging caretakers who have allowed editorial "news" and social media to warp their minds.

Even for people who think they're really doing a good thing by supporting these kinds of insane laws that are designed to restrict our 1A rights: the road to hell is paved with good intentions.

duskdozer 13 hours ago||
This is obviously where it's going to go, at least in the US. Things that are non-religious, non-Christian especially, pro-LGBT, and similar will be disproportionately pulled under "adult content" to ensure that children are not able to be exposed to unapproved ideas during formative years.
tokai 12 hours ago|||
That has already been going on for decades, with satanic panic and banning of library books.
soulofmischief 12 hours ago||
The scary thing about legislation and software is that they can negatively reinforce each other if not properly designed and implemented. We run the risk of codification of morality-of-the-week becoming embedded deeply embedded into the compute stack, which will not self-correct until there is a great political movement for liberation of compute.
soulofmischief 13 hours ago|||
Exactly. Having lived through it already, I know what it did to me and I would never wish that upon another child. The internet saved me from being a religious, colonial, racist piece of shit like the rest of my family.
rustystump 12 hours ago||
[flagged]
soulofmischief 12 hours ago||
Did you have an actual point to make or did you just choose two random words and hurl an insult with zero context? Were you looking for an actual discussion or is this all you had to offer?
choo-t 16 hours ago|||
Even with ZKP this is still highly problematic, it create difficulty for undocumented people to access the web, create ton of phishing opportunity, reinforce censorship on most site (as they will now all need to be minor compliant or need age verification), reinforce the chilling effect and make the web even less crawlable/archivable (or you need to give a valid citizen ID to your crawler/archiver).

With no proof it will protect anyone from proven harm.

gruez 14 hours ago||
>it create difficulty for undocumented people to access the web

Why is this such a sticking point in US politics? If the "undocumented" people aren't supposed to be in the country in the first place, why should rest of society cater to them? Even if you're against age verification for other reasons, dragging in the immigration angle is just going to alienate the other half of the population who don't share your view on undocumented people, and is a great way to turn a non-partisan issue into a partisan one. It's kind of like campaigning for medicare for all, and then listing "free abortions and gender affirming surgery" as one of the arguments for it.

ryandrake 12 hours ago|||
There are many ways to not have a state or national ID document in the USA. You might simply not have a driver license or passport. That's totally legal. You might be in the country temporarily for business or as a tourist. The constitution applies to all of these people.
gruez 12 hours ago||
>There are many ways to not have a state or national ID document in the USA. You might simply not have a driver license or passport. That's totally legal.

Great, frame it as "poor people without IDs" or whatever, not "undocumented", which in the current political discourse is basically the left's version of the term "illegal immigrant".

>You might be in the country temporarily for business or as a tourist. The constitution applies to all of these people.

The constitutional right to... watch 18+ videos on youtube while in the US?

DangitBobby 10 hours ago||
Do you seriously think that access restrictions will be limited only to the under-18 use-case?

We _do not want_ the government to have the capability to enforce laws of this nature.

vaylian 10 hours ago||||
> why should rest of society cater to them?

Because these undocumented people are still humans. They deserve access to information services. It's as simple as that.

miyoji 10 hours ago||||
I don't think it's "catering to them" to avoid passing laws that impose undue burden. For example, if you passed a law requiring a US passport to buy food in the US, and made it so all restaurants and grocery stores are required to check passports before selling food to anyone, I would be opposed to that law, and part of the reason is that I don't think it should be hard for anyone to get food, whether they have a US passport or not.

"Undocumented" doesn't mean "residing illegally" anyway, it just means "lacking documents", which is a state that many perfectly legitimate US citizens find themselves in. But we should want people who are here illegally and everyone else to be able to use the world wide web and computers regardless of their legal status, just like everyone should be allowed to eat and buy food regardless of their legal status, because that's just basic humanity.

gruez 9 hours ago||
>I don't think it's "catering to them" to avoid passing laws that impose undue burden. For example, if you passed a law requiring a US passport to buy food in the US, and made it so all restaurants and grocery stores are required to check passports before selling food to anyone, I would be opposed to that law, and part of the reason is that I don't think it should be hard for anyone to get food, whether they have a US passport or not.

Which is kind of my point. Don't say it's a bad idea because "undocumented people" won't be able to get food, say it's bad because it'll be a pain for everyone.

>"Undocumented" doesn't mean "residing illegally" anyway, it just means "lacking documents", which is a state that many perfectly legitimate US citizens find themselves in. But we should want people who are here illegally and everyone else to be able to use the world wide web and computers regardless of their legal status, just like everyone should be allowed to eat and buy food regardless of their legal status, because that's just basic humanity.

But if you're undocumented, it's already a massive pain to participate in society. You can't get a bank account or any other sort of financial product, can't get a job (Form I-9, or want to do background checks), can't buy real estate (who are you going to register it to?), or even drive (yes, I know some states issue drivers licenses to "undocumented" migrants, but that makes them documented and irrelevant to this discussion). Therefore you're going to have a hard time garnering sympathy from voters. An analogy to this would be all the government forms that require a telephone number or an address. Is it illegal to not have a telephone number or an address? No. Do many people not have a phone number or address? Also yes. Is "let's abolish phone numbers and addresses on government forms" a good issue to run on? No.

miyoji 9 hours ago||
> Is "let's abolish phone numbers and addresses on government forms" a good issue to run on? No.

Good thing I'm not running for office, and instead am merely having a conversation on the internet. I would vote for someone running on that issue, though!

> But if you're undocumented, it's already a massive pain to participate in society.

So I should be fine with any changes that embiggens that pain? I am not.

gruez 9 hours ago||
>So I should be fine with any changes that embiggens that pain? I am not.

I'm not "fine" with it, but when there are trade-offs to be made, I'm definitely going to weigh that side less. Some people browse the web with javascript disabled. It's already a huge pain to browse the web with javascript disabled. With those two factors in mind, if I'm deciding whether to add javascript fallbacks (eg. SSR) on for my next project, I'm going to weigh the interests of the "javascript disabled" people very low. I don't have any animus against them, but at the same time I'm not going out of my way to cater to them either.

gzread 10 hours ago|||
What if they are supposed to be in the country, but they are undocumented?

This means "not having documents". It's not a synonym for "illegal immigrant".

axegon_ 16 hours ago|||
Though the EU is at large keeping it's composure with this. My only criticism towards the EU as an EU citizen is how slow and bureaucratic the EU is and that decisions that should be made on the fly are dragged on forever.

That said, government agencies have been doing a terrible job at keeping the private information of citizens safe. But it is nowhere nearly as bad as the US. My best childhood friend died in very questionable circumstances in 2009 in the US in very questionable circumstances. He had a US citizenship and we never really found out what had happened(to the point where we never really got any definitive proof that he had died). But that didn't stop me from trying and I was blown away by the fact that I could log into a US government website, register with a burner mail, pay 2 bucks with an anonymous gift credit/debit card and get a scanned copy of his death certificate in my email. And I didn't even have to provide his passport/id/anything. Just his name.

Point is, the US has been terrible at privacy for as long as I can remember. It is probably worse now with Facebook and Ellison holding TikTok.

pjc50 16 hours ago|||
The critical thing is not so much "Americans" as "big money". Big Russian money is also a threat. Big Chinese money .. well, there's a bit of that about, but it doesn't seem to have shown up at the legislation influencing layer.
tinfoilhatter 13 hours ago|||
You fail to mention big Israel money, when 98% of US congress members are taking donations from AIPAC. Strange omission on your part.
whimsicalism 12 hours ago||
100% of AIPAC money is from Americans.
gzread 10 hours ago|||
What does that mean, though? In a sense, 100% of USD transactions take place in the US. But sometimes it's on behalf of someone else.
whimsicalism 9 hours ago||
it means that it is Americans voluntarily choosing to donate this money. it seems perfectly plausible to me that there are enough very pro-Israel Americans to fund an organization like AIPAC.

The key question is whether AIPAC is taking actions at "the direction or control” of Israel, but the money is pretty clearly not being sourced from Israel.

johnnyanmac 10 hours ago|||
Sure. Maybe in 2040 we'll know the real truth.
axegon_ 16 hours ago|||
Oh, that's a different topic: as someone from and living in eastern Europe, there's not a single doubt in my mind that the biggest threat to any civilization is russia by a long shot. The alarming part is that the current US administration hasn't got a single clue of history, suffers from chronic incompetence and the whole superiority complex and fanboying russia as a consequence - those pose a threat. In the context of the conversation, the incompetence is arguably the biggest facepalm moment.
officeplant 14 hours ago|||
>biggest threat to any civilization is russia by a long shot

I don't mean to be the average gloating US citizen, but I'm pretty sure we're the largest threat to the Earth.

bojan 14 hours ago||
Only because of Russian money and influence that helped this administration to power.

The root of the problem is Russia, always has been.

Ray20 13 hours ago||
That sounds dubious. The government's actual approval rating in Russia is, what, 5 percent? I remember watching a report about how people in Russia were literally jailed for giving the "wrong" answer to a street poll.

So, I suppose if they could somehow use money and influence to determine election results, they would use it in Russia, no?

So, I think the civilizational threat from Russia is about the same as from North Korea: nearly zero.

johnnyanmac 10 hours ago||
Russia's infinitration is long done. The brakes are cut and the cars moving down a steep hill. Putin can just sit back and watch the chaos ensue if he wants.
lionkor 16 hours ago|||
> the biggest threat to any civilization is russia

Surely you meant this as hyperbole, right? If not, I would love your reasoning as to why its a bigger threat than literally anything and anyone else.

axegon_ 15 hours ago|||
> someone from and living in eastern Europe

Reasoning: experience.

edgyquant 15 hours ago|||
Most civilization is not in Eastern Europe though, Russia is not a threat outside of its immediate proximity and its relative strength has only lessened over the decades
lionkor 15 hours ago|||
At this point the US is arguably a much larger threat to random small countries. "We will make so much money if we find a reason to attack <your country>" is the real threat, if any. Of course, far behind other existential threats.
axegon_ 12 hours ago||||
Explain this[1] then. If you think they aren't doing this outside eastern Europe, do I have some news for you. Comments are pretty telling too. And If the scenario described in the video rings some bells surrounding all elections in the democratic world over the last decade, congrats.

[1](https://www.instagram.com/reel/C5TnWyEtwgN/)

bojan 14 hours ago||||
Russia is not a _physical_ threat outside of its immediate proximity.

But they invest large amounts of money to propaganda channels everywhere, have direct military influence in large parts of Africa, are known to poison people in the UK and elsewhere, etc.

> its relative strength has only lessened over the decades Russia is not a _physical_ threat outside of its immediate proximity.

But they invest large amounts of money to propaganda channels everywhere, have direct military influence in large parts of Africa, are known to poison people in the UK and elsewhere, etc.

NickC25 10 hours ago|||
A country with hypersonic missiles and the largest stockpile of nuclear weapons on the planet is only a threat inside its immediate proximity?
lionkor 15 hours ago|||
Experience is no good reason to make a blanket statement about a country and all its people, especially not when it's made with such an assertive voice.
axegon_ 15 hours ago||
Is it not? Have you heard about a TV program called the news? They have caused more death to eastern Europe than Hitler did in WW2 and is continuing to do so, has infiltrated countries and governments for generations, actively threatens everyone on daily basis and the entirety of their social media (domestically and expats/immigrants/spies) is nothing but endless wishes for death of anyone that is not russian. Westerners see that through the prism of "out of sight, out of mind" + language barrier, but the threat is neither out of sight, nor out of mind. Spend a few hours on bellingcat and you'll quickly change your mind.
lionkor 15 hours ago||
> Experience is no good reason to make a blanket statement about a country and all its people

> Is it not?

No, and no part of your comment really seems to argue otherwise? I know about current world events. Your argument was that "experience" is a good enough reason to make a blanket statement about a country and all its people, and you doubled down on it, so it's not even like I'm constructing a strawman here or anything.

It's just wild to me how far this kind of blind hate goes. If "experience" is enough to say that a country is a bigger threat to civilization(!) than, lets say, pandemics, natural disasters, global nuclear war, etc., then there really remains no basis for any kind of healthy discussion. At that point it's just blind hatred.

axegon_ 14 hours ago||
I've never been subtle about how I feel about russians: Private properties confiscated. Several instances of terminal diseases in my family as a direct consequence of their actions. Several instances of people spending their entire lives in concentration camps, several instances of people being thrown out of hospitals and let to die in the streets. To the point where I barely have any living relatives. And in recent years, death of a number of close friends. And I am supposed to have a different feelings? Come back to me when you go through the same.
lionkor 14 hours ago||
I'm sorry, I don't mean to invalidate your own experiences. I understand the need for hyperbole, and I also cannot even begin to understand the pain and suffering that you must have experienced. I'm not talking about that.

I'm trying to steer the conversation to stay factual, because I usually appreciate HN for its clear communication style. Sorry for offending you and I'm sorry if I've caused you further suffering. Let's not continue this conversation.

pjc50 15 hours ago|||
I think this is entirely reasonable given the history of Russia vs Eastern Europe, but especially the invasion of Ukraine. Russia is currently being held at the Dnipro river, but Putin has stated his intention to "recapture" most of the former USSR.
lionkor 15 hours ago||
> Putin has stated his intention to "recapture" most of the former USSR.

I keep hearing this but I struggle to find any sources, beyond articles like [1] which are... not particularly good sources, even a reddit comment would be a better primary source than that.

I'm not trying to be combative, I just genuinely struggle to find primary sources, probably because I'm using the wrong keywords or something.

I understand the reasoning, but I would love to actually see/read/hear/whatever where Putin "states" this desire explicitly!

[1] https://gppreview.com/2015/02/12/putins-dream-reborn-ussr-un...

heavyset_go 15 hours ago|||
See here: https://en.wikipedia.org/wiki/Foundations_of_Geopolitics#In_...
lionkor 14 hours ago||
That's a book by Aleksandr Dugin, not Putin. I was asking specifically if there are ANY sources for the recurring statement that Putin wants to conquer back former USSR states. I see why its concerning, and how Dugin's close ties to the government are interesting, but I do not see a quote, or any other source, where Putin explicitly STATES this intent. I don't see it.

Surely I'm missing something here. Putin's 2023 "The Concept of the Foreign Policy of the Russian Federation" also does not state conquering back former USSR states. Where is it? If he states it so clearly that people keep quoting it, surely there must be a source for it? Sorry if I'm a PITA.

To be clear, I'm interested in this because this would be a fantastic argument to bring to discussions, but without having seen a source, I don't think I could.

AnimalMuppet 14 hours ago||
Imagine that someone writes a post saying something outrageous. And imagine that Trump retweets it. He didn't say it... but he kind of did.

I think Dugin's book is like that. Sure, Dugin said it, not Putin. But IIRC Putin did some things to make Dugin's book more influential. I forget the specifics - making it required reading in the Russian military academies, maybe?

There have been other statements by Russian politicians who are widely regarded as Putin's mouthpieces. Medvedev, certain key figures in the Russian parliament. I know I've seen that, though I don't recall the specifics.

So Putin maybe didn't say it. And yet, his endorsed mouthpieces (more than one) do say it.

You said "without having seen a source". Well, I didn't give you one. But if you want to look, I have given some places to start.

lionkor 14 hours ago||
I fully get that! I understand how people get to that conclusion. What I don't understand is why I repeatedly see people online, also on HN (as you can see), who claim that Putin "stated" that he wants to rebuild the USSR, when I can't find any source that he did.

> making it required reading in the Russian military academies, maybe

Yeah, I think he did.

> So Putin maybe didn't say it.

That's my concern. When people make the statement that he did, when he didn't, they essentially preempt any reasonably discussion and start it off on the entirely wrong foot.

If I want to have a discussion with my neighbor about him not cleaning up his own trash, surely I would not start the discussion with "you LOVE living in trash, don't you", even if I can reasonably deduce that he does. It just turns the entire discussion hostile to make claims that aren't supported, and it weakens all subsequent arguments!

AnimalMuppet 14 hours ago||
But does it start the discussion off on the entirely wrong foot? If Putin endorses Dugin's book, requiring the military academies to read it, don't we have fairly high confidence that it is at least close to Putin's position?

So I don't think it's the entirely wrong foot. It's a shortcut and an imprecision, but the point (that Putin actually thinks this) seems to be valid. (Though one should have less than 100% certainty that it represents his position - but with Putin, that should apply to a direct quote as well.)

lionkor 13 hours ago||
The statement should be "he endorses XZY who/which argues for reforming the USSR by force" or something. I think factual accuracy is the one thing we need to hold ourselves to, to the best of our abilities, also to ensure that we don't create an echo chamber and can keep our biases in check a bit more.
AnimalMuppet 13 hours ago||
Fair enough. He endorses, he didn't say. I can buy that.
tokai 12 hours ago|||
Here[0] you have it directly from Putin; Ukraine is not a real country and Ukrainian is a fake ethnicity and they are actually Russian.

You have to remember how political communication works in Russia. They rarely state goals outright, and always juggle several narratives at the same time. To make it hard to pin them down to any position and achieve exactly what is happening here.

[0] https://en.wikisource.org/wiki/On_the_Historical_Unity_of_Ru...

Aurornis 11 hours ago||||
> I was blown away by the fact that I could log into a US government website, register with a burner mail, pay 2 bucks with an anonymous gift credit/debit card and get a scanned copy of his death certificate in my email. And I didn't even have to provide his passport/id/anything. Just his name.

Death certificates become public record after a period of time, depending on the state. In some states it’s 25 years after death, some more, some less.

https://www.usa.gov/death-certificate#:~:text=Can%20anyone%2...

As far as I can tell this is the same as in the EU: Death certificates can be publicly accessed for a fee after a period of time defined by member states.

I found some comments saying death certificates in the UK could be accessed as early as 6 months in some locations.

So I don’t see this as the US being uniquely terrible on privacy. This is how most of the western world does it. You just had experience with the US and assumed EU was different.

> we never really found out what had happened(to the point where we never really got any definitive proof that he had died).

I’m sorry for your loss, but doesn’t this imply that the US did do a good job of protecting his privacy? It wasn’t until the time limit had passed that you were able to find the death certificate.

DharmaPolice 13 hours ago|||
Death certificates are public records (at least in the UK) so why shouldn't you be able to get one? I think the alternative, where people's deaths could be kept secret by the state is a far greater risk than the privacy rights of the dead (GDPR type laws generally apply to the living).

I don't know about elsewhere but in the UK anyone can apply for any death certificate going back to 1837.

axegon_ 12 hours ago||
Applying is one thing. Giving unrestricted access to anyone, which contains a ton of private information, be it of a deceased person, is not OK. Going back to my original statement: fake name, fake email, untraceable payment.
gzread 15 hours ago|||
No, the way to go is the California way. The device owner (root user) can enter the age of the user. Restrictions are applied based on that. Nothing is verified.
EmbarrassedHelp 52 minutes ago||
That way should be paired with "adult by default". So that No age data means adult.
mrob 16 hours ago|||
Zero-knowledge proofs are unworkable for age verification because they can't prevent use of somebody else's credentials.
a022311 15 hours ago||
The same argument could be said for other age verification methods. Nothing stops a kid from getting their older cousin to verify their identity for something and it will never be possible to prevent this.
Aurornis 11 hours ago|||
The older cousin case doesn’t scale. True ZKP could be fully automated to dispense verification tokens from a website to every visitor. If the proofs are truly zero knowledge there is no way to discover who is giving millions of kids their ID.

When we hear about “zero knowledge” ID checks in real proposals they’re not actually zero knowledge altogether. They have built in limits or authorities to prevent these obvious attacks, like requiring them to interact with government servers and then pinky promising that those government servers won’t log your requests.

mrob 14 hours ago||||
The people proposing these laws presumably think imperfect enforcement is better than no enforcement at all. In the non-zero-knowledge case, it's possible to revoke falsely shared credentials.
Aurornis 11 hours ago||
> In the non-zero-knowledge case, it's possible to revoke falsely shared credentials.

In a true zero-knowledge system sharing falsely shared credentials becomes easy because it’s untraceable. If the proof has no knowledge attached, you can’t conclude who used their credentials on a website that generates proof-of-age tokens on demand for visitors.

mrob 10 hours ago||
Yes, that's exactly why it can't work.
gzread 14 hours ago||||
The one where the root user can enable parental controls requires the kid to know their parent's password or save up to buy their own device.
iamnothere 12 hours ago||
Oh no, a $20 Walmart phone, how will they ever afford it.

(Note, this is why they won’t stop at the CA bill.)

johnnyanmac 10 hours ago|||
That's why this whole thing is stupid. The smokescreen of "protect the children", and meanwhile a child will just use find another device. Maybe an older one.

Its billions of lobbying for state surveillance under a smokescreen you bypass with basic human interaction.

EmbarrassedHelp 10 hours ago|||
Zero-knowledge proofs are only anonymous in theory if you ignore the issue of requiring a third party, and the issue of implementations.

And according to the EU Identity Wallet's documentation, the EU's planned system requires highly invasive age verification to obtain 30 single use, easily trackable tokens that expire after 3 months. It also bans jailbreaking/rooting your device, and requires GooglePlay Services/IOS equivalent be installed to "prevent tampering". You have to blindly trust that the tokens will not be tracked, which is a total no-go for privacy.

These massive privacy issues have all been raised on their Github, and the team behind the wallet have been ignoring them.

ori_b 13 hours ago|||
The way to go for this kind of thing is to not go for this kind of thing at all.
alecco 13 hours ago|||
You are missing the point. The real purpose is to control the Internet and free speech. They've been trying this for ages. Now the excuse is protecting children. Soon terrorism will be back. And don't forget aոtisеmіtism, too.

Not exactly a good moment for this particular caste of politicians/elites to pretend they care about children's well-being!

everdrive 13 hours ago||
The internet we grew up with is nearly gone. For my part I've downloaded most of what I want and am trying to move more towards physical books. I think in the future, the internet could be a lot like cable TV. The value it brings is not worth the costs it imposes.
totetsu 14 hours ago|||
Seeming as this affect everyone .. Is there anything like and Open Collective .. grassroots consortium, to put together strong sensible zero-knowledge proof based policy examples that could be given to law-makers instead of this shadowy surveillance Trojan horse nonsense?
EmbarrassedHelp 51 minutes ago||
The real answer is that there is no solution to the problem other than what basically amounts to better parental controls.
keybored 15 hours ago|||
Two billion in lobbying. And the conclusion is that regulation is the problem?
Aurornis 12 hours ago|||
> Zero-knowledge proofs are the way to go for this type of thing,

The benefit of zero-knowledge proofs is that the hide information about the ID and who it belongs to.

That’s also a limitation for how useful they are as an ID check mechanism. At the extreme, it reduces to “this user has access to an ID of someone 18+”. If there is truly a zero-knowledge construction using cryptographic primitives then the obvious next step is for someone to create an ad-supported web site where you click a button and they generate a zero-knowledge token from their ID for you to use. Zero knowledge means it can’t be traced back to them. The entire system is defeated.

This always attracts the rebuttal of “there will always be abuse, so what?” but when abuse becomes 1-click and accessible to every child who can Google, it’s not a little bit of abuse. It’s just security theater.

So the real cryptographic ID implementations make compromises to try to prevent this abuse. You might be limited to 3 tokens at a time and you have to request them from a central government mechanism which can log requests for rate limiting purposes. That’s better but the zero-knowledge part is starting to be weakened and now your interactions with private services require an interaction with a government server.

It’s just not a simple problem that can be solved with cryptographic primitives while also achieving the actual ID goals of these laws.

attila-lendvai 15 hours ago|||
it's not about protecting children. that's only the PR.

once you get this you stop asking why the tech details are the way they are.

edgyquant 15 hours ago||
Counterpoint: yes it is
officeplant 14 hours ago||
Countercounterpoint: It's privacy destruction creep and it always has been.
gzread 14 hours ago||
Countercountercounterpoint: did you actually read the California age "verification" law?
officeplant 13 hours ago||
Countercountercountercounterpoint: Yes and like every other age verification scheme in the US the underlying idea is privacy erosion. With a side serving of censorship given most dev's can't be bothered to implement these age verification schemes into their software so users might just end up gated out of applications if their OS goes through with this nonsense.

Other states are even worse, creating another way to have your buddy buddy lobbyist folks fire up a new business opportunity to make money as a verification service.

gzread 12 hours ago||
Type in the number 30 to disable gating
zoobab 13 hours ago|||
"how terrible EU regulation is"

Judges in other countries (Texas) found out this kind of law was a violation of the Free Speech.

Since when Free Speech do not apply to -16y old?

Made laws are made, then killed by courts later one.

jmyeet 14 hours ago||
Not sure what the Gruber thing is about. I guess I lack context. But on ZKP, I will agree but add this:

The only authority that can be trusted to do age verification is the government.

You know, those people who give you birth certificates, passports, SSNs, driver's licenses, etc.

The idea that parental supervision here is sufficient has been shown to be wholly inadequate. I'm sorry but that train has sailed. Age verification is coming. It's just a question of who does it and what form it takes.

Take Youtube, for example. I think it should work like this:

1. If you're not of sufficient age, you simply don't see comments. At all;

2. Minors shouldn't see ads. At all;

3. Videos deemed to have age-restricted content should be visible;

4. If you're not logged in, you're treated as an age-restricted user; and

5. Viewing via a VPN means you need age verification regardless of your country of origin.

It's not perfect. It doesn't have to be.

troyvit 12 hours ago||
The original post was removed from reddit but it links to this GitHub repo that has most of the same information, but in a different format:

https://github.com/upper-up/meta-lobbying-and-other-findings

alpaca128 12 hours ago||
Luckily it was archived: https://web.archive.org/web/20260313125244/https://old.reddi...
narrator 12 hours ago|||
Also on the wayback machine: https://web.archive.org/web/20260313090844/https://www.reddi...
tomhow 10 hours ago||
Ok thanks, we've repointed the URL to the GitHub page.
simonebrunozzi 16 hours ago||
Not surprisingly, Meta is possibly the worst "offender" behind funding of these campaigns.
heavyset_go 15 hours ago||
AI companies are also donating tens of millions to these PACs and others that are promoting age verification laws, it lets them sell AI content rating systems using their models.
tencentshill 12 hours ago|||
Which is strange, because it is widely known a large amount of their advertising revenue comes from fake accounts.
cryptoegorophy 11 hours ago||
This doesn’t make sense, how do these fake accounts bring revenue ? I thought the end goal is to improve conversion rate by removing the “bots” and this would therefore lead to higher ad spend and more money to Facebook direct
Ritewut 11 hours ago|||
I work in marketing and not nearly as much effort as you think goes into removing bots. They go after the lowest hanging fruit, the most obvious bots like scrapers and crawlers but most bots impersonating real people easily make it through. Traffic is traffic.
snovv_crash 10 hours ago|||
The advertisers still pay, they just don't get conversions.
pessimizer 8 hours ago|||
They're a government contractor specializing in identity and a monopoly who loves not being regulated. They're really a straw donor - this is the government donating money to lobby itself. All of this is money leaving the government proper and being put through barely two degrees of indirection to be sent both to politicians whose job is to direct the government, and to the media to misdirect the public.

This (an end to general purpose computing) isn't anything that people can prevent through civil channels. It will happen with or without public approval. You will have as much control over it as you had over the decision to go to war with Iran. It will never be on any ballot. People who help will get rich, people who don't, won't. Eventually, people who help will barely be middle class, and people who don't, won't. Their kids will own your kids.

lotsofpulp 16 hours ago||
I’m curious why Meta would benefit. Meta seems wholly unnecessary, the verification can be done at the OS level, completely in the hands of Apple/Alphabet and maybe Microsoft.

If anything, Meta’s utility would seem to shrink if the OS handles proof of being a real person.

c0balt 16 hours ago|||
Regulatory capture through a higher barrier to entry. Any social media platform that wants to compete with Meta's portfolio will now also need to have an age-verification system in place (which is guaranteed to introduce higher costs). Meta can likely afford to eat the costs here as a tradeoff for the higher impact on smaller players.

It also gives them more information on users as a bonus. Further, verification with a real ID is also a quite effective barrier against excessive bots.

lotsofpulp 16 hours ago||
I would think the barrier to entry gets lower because Apple/Alphabet handle age verification, and they let apps/websites use that verification.
heavyset_go 15 hours ago||
Look beyond the CA law, states have already passed laws that put the liability on app and website developers to ensure users aren't kids, there's no passing the buck to Apple or Google.

https://www.eff.org/deeplinks/2025/12/congresss-crusade-age-...

willis936 15 hours ago||||
Meta's entire business model lives on ad deals that are not on the frontend. They are in the data business and this campaign is to get access to more data without an option to opt out. Who takes the data doesn't really matter.
pjc50 16 hours ago||||
Meta get to impose verified ID on everyone and link it to their advertisers, AND kill competing networks.
negroesrnegro 16 hours ago||||
because upstart competitors cant afford the verification process / lobbying efforts next instagram wont be bought out, it cant even begin to exist
wil421 16 hours ago||||
Liability and they probably want whatever blob of bits they use to identify you from the OS.
xbar 13 hours ago|||
1. It deflects any obligation that would have landed on Meta itself to do age verification (which is what the regulators have long asked for). 2. It gives Instagram/Facebook/Messenger the ability to deliver the right ads to the right audience. It's free targeting data.
BLACKCRAB 11 hours ago|
[dead]
More comments...