@state_electrician@discuss.tchncs.de
2026-09-10 19:06 UTC
Replies (4)
-
@hirihit640@sh.itjust.works 2026-09-11 02:02
Zero-Knowledge Proofs Aren’t Age Verification Silver Bullets The idea behind ZKPs is that you are issued a “token” that vouches for your age every time you log in, creating a constant link back to the entity that verified you. The issuer of the tokens these AV schemes rely on could track every time that credential is used, creating a dangerous trail of metadata on any user they wanted to target. The issuer itself could be pressured by authoritarian governments to remove a user’s access to a service, essentially removing that person’s access to the internet entirely. a centralized identity verification system creates a single point of failure that is extremely vulnerable to both cyberattack and authoritarian overreach. Personally I’m optimistic that tech like this can be used in positive ways, but imo they should be developed transparently (open source) and decentralized.
-
@schnurrito@discuss.tchncs.de 2026-09-10 19:30
Just saying that there are ways to do it right. No, there is no way to do “censoring access to information for young people” right. That remains an entirely illegitimate goal no matter which mechanisms you invent for doing it in a privacy preserving manner.
-
@stoy@lemmy.zip 2026-09-10 20:20
Nope, it won’t be anonymous. Look, any kind of digital age verification must be connected in some way to an actual identity. If you are running a community operating under EU laws to require age verification, then a simple true/false statement won’t cut it. You will be required to log a personal ID number of the user, signed by the digital wallet issuer, that is the only way to guarantee that a specific person was verified to be of age. You as an admin of the community might not know the identity of the users, but the government can tie the account back to you.
-
@NaibofTabr@infosec.pub 2026-09-10 22:07
Storing identification information on an internet-connected system will never be safe for the people whose information is collected there. Such databases are high-value targets. They always get attacked, and the information stolen. This cannot be done safely.