Top
Best
New

Posted by iamnothere 5 hours ago

VPN ban update for UK households as government looks at 'age-gate'(www.birminghammail.co.uk)
193 points | 184 commentspage 2
big85 2 hours ago|
Most VPN companies won't implement age verification, because their purpose is privacy. This is really an attempt to ban VPNs. This won't be popular when 70% of the population uses VPNs.
dryarzeg 2 hours ago||
> when 70% of the population uses VPNs.

To be honest, unfortunately, I'm not really sure about this one.

stevefan1999 1 hour ago||
A large chunk of them is from China :p
maccard 1 hour ago||
> Most VPN companies won't implement age verification, because their purpose is privacy.

They will when it's law. Their purpose is most likely either snake oil, or bypassing geo restricctions on netflix or sports.

dofm 1 hour ago||
FWIW you can age-gate VPNs the same way you can age-gate anything else that is paid for: just don't let people who haven't got credit cards (not debit cards) sign up.

Or you can simply let free plans only terminate inside their own country. I noticed recently that TunnelBear has done this with their free plans — the "fastest" endpoint, which is the only one that is free, is now a UK endpoint. It still meets the security need anyone might have from a VPN.

I am honestly not that bothered about adult content age gating in principle, and I never really have been. I personally think sexual content is not remotely immoral but that it's reasonable to say the very young shouldn't be able to see it. It's not a freedom of speech issue.

Given the practical impossibility of parental regulation of access to devices when cheap phones and PAYG exist, the problem is the practice of it: how do you do that in a way that is privacy-preserving?

I feel that Apple has coped with this pretty well: they decided I am an adult automatically based on how long I have held an account.

I also think the UK PAYG mobile providers handle this well: they have simply always blocked adult content until you unlock it. I haven't bothered and I have never seen the content wall (except when deliberately testing it) so I believe its boundaries are drawn quite well.

Though I do routinely use one site that might end up blocked over time because it sits right at the boundary of the law's interest. So one day I might need to, I guess. And I have considered what I might need to do about a website for my own photographic work, which sits on the edge of the ofcom rules interest in practice.

We are missing secure anonymous age attestation but I think that will come.

I do think American critics tend to interpret this in terms of the morality and religion battle-zone that riddles US culture and encourages US states to try to police morality in bizarre ways or to extend "porn" rules to things like information about sexuality, gender or sexual health (which would just not happen here because we're actually not really religious or prudes; there is essentially no religion in our politics, which is ironic considering the C of E have seats in the Lords).

I don't think American critics should really leap to judge UK rules when you have two dozen different states imposing rule sets that in some cases came first and in many are wholly unworkable.

UK concerns are about child access to extreme material and about sexual exploitation, fundamentally. It's not easy and it's clear some aspects of the legislation are difficult, but accepting criticism from Americans as if the US position is clear, unambiguous and robust is no longer something we should entertain, especially lessons about the morality of free speech from the US administration, given their apparent selective contempt for it.

VortexLain 1 hour ago|
So every adult citizen is forced to open a credit line?
dofm 1 hour ago||
You're straw-manning there. Every adult citizen isn't forced to have a VPN or view porn.

Most UK citizens do have a credit card anyway (though I in fact do not). It's more than three quarters.

It's not even the only way someone offering a service for what is after all a subscription product could achieve adult verification through existing banking-based mechanisms, because there are also bank mechanisms for making payments through a direct debit, which again you have to be an adult to do in the UK, and everyone can.

KYC processes also work though they are annoying and a VPN provider is inherently not going to want to do it.

But they are going to want to take money and there are these two mechanisms that come with adulthood verification attached.

Apple could do more on this with Wallet — they could let you pay with a virtual debit card that can only be in your wallet if you've passed their adult verification. Would need some card industry support. I am not sure why I can't just associate adulthood with my debit card; that would be a good fix.

wnevets 3 hours ago||
Good thing Brexit happened to prevent government overreach.
basisword 1 hour ago||
Tbf the point was to prevent the EU 'overreach' i.e stopping us violating our own peoples human rights. We can violate them freely now. Success.
hmmmmmmmmmmmmmm 3 hours ago||
Better then performing a social experiment on children.
subscribed 1 hour ago|||
This is not to stop children from doing that. This is primarily to deanonymise as many people as possible, before the next steps come into force (scanning all files and messages on the every Internet - connected devices, hardware attestation of all the internet - connected devices, etc)

So when the citizens inevitably start protesting against the oppression, it's easier to subdue them.

functionmouse 3 hours ago|||
don't worry they're still doing that
SheinhardtWigCo 1 hour ago||
This will obviously not become law, because it would cause significant collateral damage to businesses, and they won't risk the gravy train derailing.
shakna 3 hours ago||
Every corporate I know of, uses VPNs. Especially when workers connect from home. Is the UK government really interested in going up against the majority of their business partners...?
kdheiwns 3 hours ago||
Laws don't apply to corporations. It'll only be used to punish individuals.
capexandcode 3 hours ago||
[dead]
joe463369 1 hour ago|||
There is nothing in this article that suggests the UK government are planning to ban VPNs.
gspr 1 hour ago||
There is lots in the article that suggests they want to ban them for minors though. How the hell is that supposed to work without at a minimum a severe curtailment of VPNs in general?

So no, not a ban for all. A ban for minors, and a severe curtailment in general. The parent post might not be 100% accurate, but it's close.

maccard 3 hours ago|||
The government use VPNs. The ban will target individual use.
inigyou 3 hours ago|||
It's not about a technical capability to encapsulate packets, it's about whether people use it to bypass censorship or not.
cassianoleal 2 hours ago|||
A lot of corporations use crappy VPN-like MitM services like Zscaler.
rcxdude 3 hours ago||
It would not be hard to write laws to restrict one use but not the other. They may be the same tech but the use-cases are quite different.
Caius-Cosades 4 hours ago||
The great firewall of UK.
blululu 3 hours ago||
Feel like there ought to be some Sinn Fein backed point to point connection in Belfast that leverages the Good Friday Agreement to get around this.
fidotron 3 hours ago||
It would have to alter the voice of anyone on it to make them sound ridiculous.
wbl 3 hours ago||
For yanks: https://en.wikipedia.org/wiki/1988%E2%80%931994_British_broa...
dingaling 1 hour ago||
You omitted to mention that the Irish state broadcaster, RTE, actually implemented voice restrictions before the UK did:

https://www.rte.ie/brainstorm/2024/0119/1217560-section-31-b...

arrosenberg 4 hours ago||
Hadrian’s Firewall
m00dy 3 hours ago||
Hadrian's Gate
singingtoday 1 hour ago||
What if I use a VPS instead? What if it's a virtual private VPS wholely in memory? What if it's a pool of VPS boxes shared by me and a network of people?

There's always a way around, but this direction is concerning.

rgblambda 43 minutes ago|
They're banking on the number of kids using that mechanism to bypass the ban being small.

I'm not in favour of this but I'm acknowledging that if the number of children accessing social media drops significantly because of a VPN ban then they've achieved what they set out to do.

I don't like the salami slice tactics of not including this in previous legislation despite knowing that it would be necessary to enforce the social media ban. There would have been a lot less support if it was presented as a complete package that could be debated in it's whole.

flexagoon 3 hours ago||
1. Age-gate social media

2. Children start using VPNs to bypass the ban

3. Age-gate VPNs

4. Repeat steps 2-3

Truly a masterful plan.

inigyou 3 hours ago||
It's actually

1. Ban something

2. People bypass the ban

3. Ban however they're bypassing the ban

4. Goto 2

subscribed 1 hour ago||
Don't forget about plans to scan phones (in this iteration).
yokoprime 2 hours ago||
This will be interesting to follow. I dont see how this can be fully enforced. Maybe for iOS and other platform where app distribution is highly restricted, but on linux, windows and even macOS i can use mullvad, sending cash in an envelope without ever revealing my identity.
rgblambda 1 hour ago||
The idea is that it doesn't matter if the ban is fully enforced. Most children only have a smartphone and they're the target of the ban.
ekianjo 2 hours ago||
they can forbid mullvad.
drnick1 1 hour ago||
How would that work? The UK can presumably ban Mullvad from operating in the UK, but I don't see how it can prevent outbound connections to Mullvad servers elsewhere, short of implementing a nation-wide firewall like China or Iran. And even in those places the firewall is pourous and routinely circumvented.
netfortius 4 hours ago|
There are few things more exciting, in relationship to attempting to restrict access to (data) communications, than a government which thinks geeks won't find ways around such. Now sit back, relax, and let's wait for the next generation of encrypted channels solution development.
2pEXgD0fZ5cF 2 hours ago||
This isn't something that can be defeated like this. You are right, there will be ways around this. But we also have to be honest: being able to buy "off the shelf", two click VPN solution for 5$ already puts you into "geek" category. Relatively speaking.

If they ban the commercial providers, payment processors will be the first to enforce it. And Google and Apple will throw the 1-Click solutions out of their app store for users from those countries immediately. And with that the topic is effectively dead even for most "geeks". At this point the goal is already pretty much achieved, most people are cutoff and under heavier surveillance. Next comes the group that know what a server is, how to rent one, what OpenVPN or Wireguard are. But many of the most used websites already make your life difficult if your IP is from such a range.

It goes on. At each step you can argue "there is still a way, as long as you got networking with other countries". Absolutely correct, but at each step the group who knows how and is willing to invest the energy shrinks. And the intended goal will likely already be achieved at the mentioned phase 1 above. The fact that some people still find ways isn't really a gotcha in this matter.

And at some point they will criminalize it. Does it matter that they are unlikely to catch you? Is it worth the risk? And if so, what if you catch strays for it from an unrelated matter. Ultimately they will simply target the devs that help build easy solution for the less tech-savy.

One big reason why you want to keep a bunch of nerds tunneling out around anyway is that you keep useful, defusing attitudes like that floating around. Aka "It's not that bad, there are still ways around it, haha, those idiots".

sandcat_ 1 minute ago||
> being able to buy "off the shelf", two click VPN solution for 5$ already puts you into "geek" category

I’m not sure that’s true anymore. I discovered recently my 70 year old, very technology-averse, parents are using a VPN (much to my initial concern). I think it’s for viewing football matches, or so they can watch iPlayer when they travel. They’re advertised on buses, etc. They’re pretty common these days.

That said I think you’re right that a block at the App Store level etc is enough to cut usage significantly.

Retr0id 2 hours ago|||
It is technically possible to circumvent the Great Firewall of China, but I think it's fair to say it's been successful in what it set out to achieve.
inigyou 3 hours ago|||
They know they'll find workarounds, they'll just arrest whoever is involved in the workarounds. Law isn't a computer firewall, it's a loaded weapon.
zarzavat 2 hours ago||
The beauty of VPNs is that you do not need to have a presence in the UK to make or sell one. And there's a huge amount of money in it.

The law is very bad at dealing with such realities, see also piracy and drugs. The last time I checked TPB is still accessible in the UK with only DoH.

Retr0id 54 minutes ago||
Some ISPs block based on TLS SNI sniffing (so perhaps ECH will save us)
subscribed 3 hours ago||
Oh, they're in motion already. There are other countries that tried to ban VPNs for decades now, that sparked multiple great avenues of development.

It's exciting to think I'll become a dissident like my parents, just because I don't want a slimy, rightwing, greasy friends of Epstein and other known abusers to ID and surveil me.

liveoneggs 1 hour ago|||
but isn't it the labour party pushing this?
throw-the-towel 56 minutes ago||
The Labour have their own friends of Epstein too, see the Mandelson scandal, and some think Labour's much more rightwing now than it needs to be.
liveoneggs 13 minutes ago||
left and right appear to have lost all meaning
CPLX 3 hours ago|||
Perhaps then you could at least vaguely understand the desire of people to avoid having slimy, rightwing, greasy friends of Epstein and other known abusers to ID and surveil their children.

I definitely see both sides of this argument but to pretend the answers here are obvious just means people aren’t being serious. Serious harm is being caused to children and just because that’s a known cliche doesn’t make it not a real concern people have.

subscribed 2 hours ago|||
Look, the excuse is being made that kids are exposed to harms in online places, in general.

Most famously in Roblox (that's now fixed on Roblox side first with age banding, now by sharding it into three parts), and then in socials -- but the impact of, say, Instagram where kids are preyed upon because the algorithms are promoting them to preying populace, and where Meta openly runs experiments with their mental health, knowingly pushing them into harms way, is vastly different from, say, Coverstar.

Impact of abuse from Meta is well documented already, yet Meta is not punished. Kids are being radicalised by being fed toxic content, and it's also well known. Elon Musk's X was knowingly producing CSAM and non consensual nude images of real people and it took a tremendous amount of time for _anything_ to happen - and I don't see Musk on the dock yet?

There are ways to automatically block almost all kids on socials. Take away DMs and comments on the posts from all unverified users and kids suddenly will be much safer. All that can be done today.

The greasy friends of Epstein are running this shitshow, they're in the government (most famously PM of the UK knowingly appointed a longtime Epstein friend as the UK ambassador for the US), they've been covering Jimmy Saville abuses in the BBC, Police forces, the past government, which receives financial incentives from some of these companies to push things exactly the way they want.

Most severe harm to children is caused with the tacit approval of the government and media.

Sneaky access to the socials is not this.

Oh, and you know what? Receipts show it's Meta behind this weird, sudden push for age checks. Meta and their $2B.

So you already know something's off, or at least you should.

TheOtherHobbes 2 hours ago|||
The slimy, rightwing, greasy friends of Epstein own all the main political parties, the UK's mainstream media, most of the social networks, and have their fingers in the NHS.

The UK hasn't been quick to deal with Epstein's associates and has a long history of either ignoring or losing critical evidence in CSA cases associated with politicians and public figures.

With that background, mandatory ID makes it easier, not harder, for abusers to act with impunity and/or official protection.

More comments...