Somewhere in a government building in the UK: We did it, Patrick…

  • Lost_My_Mind@lemmy.world
    link
    fedilink
    English
    arrow-up
    61
    arrow-down
    1
    ·
    1 day ago

    If they did this here, I’d just stop using bluesky. I’m 41. But I have no interest in verifying ages online. We’ve all seen how poorly companies handle intetnal security.

    Just yesterday McDonalds had their entire database of applications compromised because someone tried the password 123456.

    Bluesky would be dropped instantly.

    • catty@lemmy.world
      link
      fedilink
      English
      arrow-up
      39
      arrow-down
      1
      ·
      1 day ago

      This isn’t about age verification. It’s about getting your ID and tying your (probably illegal but yet to be proven) online activity to it. Much like the firewall of China.

      All wrapped up nicely in the disguise of “age verification”

            • pika@feddit.nl
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              1
              ·
              8 hours ago

              Is the system opaque? Does someone else hold the private encryption keys? Could unencrypted data leak from the company and expose users?

              If any of those answers are “yes”, then assume it’s already compromised by a government and unsafe.

              • Ulrich@feddit.org
                link
                fedilink
                English
                arrow-up
                2
                ·
                7 hours ago

                There is no encryption involved. They just give you a token that verifies your age and you present the token to the site.

                • pika@feddit.nl
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  7 hours ago

                  But you have to submit evidence of age to some site, right? So where does that evidence (your ID) get sent to or stored? Once it’s sent, are you sure it’s not stored? Is the token unique or traceable to you?

                  I honestly don’t know, and when I don’t know, I have to assume it’s not staying private.