2026-09-10 18:43 UTC
Replies (15)
-
@state_electrician@discuss.tchncs.de 2026-09-10 19:06
The EU is building the EUDI wallet (or rather requiring each member state to provide a solution) and it will be possible to prove your age with that without disclosing details about your identity. And it’s even possible to do this on your device, so the state won’t know who you’re proving your age to. Just saying that there are ways to do it right. It’s just a matter of whether everybody wants that.
-
@Successful_Try543@feddit.org 2026-09-10 18:51
It depends on how AV is implemented. Google can either ask for your ID card, that would be inherently non-anonymous and prevent you from creating a burner account, if they would store the information of your id card – which of course Google would never do (/s). The other option would be a third party would check your ID an provide Google only with the information that the request is done by somebody of legal age.
-
@Tollana1234567@lemmy.today 2026-09-11 05:24
google started limited the accounts created, allegedly to combat botting/spamming, and from AI SCRAPing. they have a deal for Reddits data to AI scrape, i think google is helping them out trying to force genuine users content, it pretty much conincides with reddits forced login.
-
@lmaowat@lemmy.wtf 2026-09-11 07:46
Wait, I have to set up burner accounts all the time for Red Team engagements and you can usually get a google account with SMS verification only. Are you sure you’re doing it correctly? are you doing it from Tor or a VPN or an internet café? Why would your country matter in the process for an internet account if you can use an IP from virtually anywhere? All these tiny details matter for your OpSec, and every choice also affects how hard you trigger abuse prevention mechanisms from service providers. Details aside, yes it is getting harder and its insane that you need actual professional skills to maintain privacy, where it should be the default. Educate yourself and your loved ones on surveillance self-defense: ssd.eff.org Also, lmao at expecting privacy from anything Google.
-
@aarch0x40@piefed.social 2026-09-10 18:56
Why use Google or any of the big US tech firms for burner accounts then?
-
@Davel23@fedia.io 2026-09-10 19:39
I am pretty sure this lets google grab all of the metadata of the mobile phone Android is a Google product. They have full control over it. They can "grab all the metadata of the mobile phone" (whatever that means) any time they like.
-
@vk6flab@lemmy.radio 2026-09-10 20:18
techdirt.com/…/hackers-expose-the-massive-surveil…
-
@hirihit640@sh.itjust.works 2026-09-11 09:10
Because the credential is unique. Imagine you submit it every time you log into Google, Facebook, and Youtube. They could all collude and see that the same age verification token was used and link the accounts.
-
@mupan@feddit.org 2026-09-11 11:42
I set up burner accounts on proton.me. But anyway, you are right. Sadly enough, you only needed a reliable, standardized system that gives back if you are below or on and beyond a certain age threshold, but BigTech and their bootlickers already started to implement age verification with proprietary apps, exploiting every ID detail they get, and legally required BigTech accounts, services, and stores.
-
@Quexotic@infosec.pub 2026-09-11 13:21
For many people, yes, I think it will lead to the end of anonymous accounts, but for many others, it will lead to innovation in bypassing age verification.
-
@hirihit640@sh.itjust.works 2026-09-11 20:59
If they are use once tokens then you need to get more. If implemented badly, they could be asking for a new one every time, and now the issuer knows whenever you are using them. I’m not sure exactly what implementstion flaws The EFF article was talking about but they have links if you want to learn more. Edit: also, now that I think of it, if it’s single use, then they need to be invalidated every time they are used. So this probably also notifies the issuer every time a token is used, and which token it was. There are probably ways to do this privately but it is a tricky problem, and something the government probably won’t get right the first time, which is the main issue that the EFF is talking about.
-
@hirihit640@sh.itjust.works 2026-09-12 01:31
You’re talking about potential implementations. EFF is talking about issues in current implementation. As I said in my very first comment, I’m sure it can be done properly. The EFF is worried that if the current implementation is rolled out now, the system will stay unfixed for years and make privacy even worse. But anyways, since you seem knowledgeable about the EUDI implementation and I’m too lazy to look it up, do you know if the current implementation allows a website to collude with the issuer to get the identity of a user?
-
@hirihit640@sh.itjust.works 2026-09-12 10:27
I see so it seems like we were talking past each other. I’m aware of Cloudflare’s token system. As well as other systems like GNU Taler and Monero. So clearly privacy preserving systems can be built. But I also trust the EFF, and if they say the current system has major flaws I’m inclined to believe them
-
@hirihit640@sh.itjust.works 2026-09-12 10:58
As you said, there’s still metadata. For example, if they requested a new token every time you used one. Technically the token itself is still zero knowledge, but now the issuer knows when you use it.
-
@roofuskit@lemmy.world 2026-09-12 11:40
Google already has the imei of that old phone associated with you. Once you start using that phone online and they are tracking to, they’ll be able to confirm it’s you.