Source: https://infosec.exchange/users/isotopp/statuses/115059833470035521
Transcript
Age Verification
Due to applicable UK laws, websites must verify the age of visitors using official ID to confirm they are at least 18 years old. We are a small site and unfortunately do not have the resources to implement such a system, so we are unable to serve users in the UK.
We are not required to verify your location, so please confirm below:
[I am not in the UK] [I am in the UK]
You must log in or register to comment.
If they have no infrastructure or legal presence in the UK they are not required to do shit. The UK can block them but that’s about it.
The UK does not have extraterritorial jurisdiction! Whatever stupid shit they do on their shitty little island does not affect foreign firms that do not operate there.
kinda… if you never plan on visiting the UK or any country with extradition agreements with the UK, sure… not sure exactly how extradition works, but if you ever come to a country and have big fines etc pending then they can do whatever they want
if you were like… the CEO of reddit or something, and just chose to forgo ad revenue etc from the UK but still remain operational, i’m pretty sure they’d be able to get you
Based small business
UK has been on a killing small businesses streak since Brexit
Frankly this is a comically brilliant and absolutely outstanding example of engineering malicious compliance
Sadly, will not actually be sufficient. They put the full burden of this shit on the site owner, all of it, without exception.
You could host in a country like Cameroon, they won’t give a shit and EU won’t bother going after them. They could geoblock the whole country however.
They could geoblock the whole country however.
The Great Firewall of TERF Island
we can compromise and just firewall jk rowlings house
Would the firewall replace her mold wall?
UK left the EU, so the EU won’t be doing anything regardless of your host country.
Meh you just say “we don’t serve users from your country, we are not bound by your laws. users from the UK are breaking our tos”
that’s not super convincing though… just like TOS isn’t a protection for murder and other serious crimes, it can’t protect against all things. i’m not sure how the law is worded, but it’s not quite so cut and dry
This already happens occasionally with the EU’s GDPR.
it does, but i don’t think they’re actually following GDPR… GDPR applies to residents of the EU; not where they are accessing the content from… technically, if an EU resident accesses a non-GDPR-compliant site while visiting the US (etc), the site is still legally obligated to follow GDPR
it’d be way to difficult and probably ineffectual to enforce since the entity doesn’t necessarily exist in the EU (and they have bigger fish to fry, among many other reasons), but technically it’s there and they could probably do things like blocking executives from entering the EU or arresting them if they enter
Yup, that’s what we’re saying. Some sites don’t work in EU because they don’t want to comply with GDPR, so it’s likely some sites will stop working in UK because they don’t want to comply with their anti privacy laws.
It’s pretty sufficient. I’m not British, I don’t sell products in Britain, I do not have British assets, and I’m compliant with all American laws. They can levy all of the fines they want but I’m not obligated to care.
unless you ever want to visit the UK
of course if you don’t ever want to, that’s fine… or if you’re small enough to fly under the radar
but just because you have no presence doesn’t mean you’ll never have any presence
Appropriate that being in the UK is the negative option here
Usually is.
Makes perfect sense, it’s a proceed/go back option.
In this case it was some banter against Brits, but yeah
physically im in the uk mentally im literally anywhere else
become digitally estonian: https://www.e-resident.gov.ee/become-an-e-resident/
this would be great because according to kerli estonia is made of ice cream mountains and chocolate skies.
and we all hate microsoft here
Trouble is, nobody knows where it’s at.
How does a digital residency do anything…
based on the first sentence on this website, tax evasion?
well i mean estonia does get tax from e resident’s as far as i know
what. why?
Why not? 🤷
even australia? or germany?
Nah, oz is cooked already, in this case ‘social media ban’ for under 16s, same identity/privacy issues no doubt once they get their shit together but this time you’re giving ID to meta and tiktok instead of pornhub, significantly worse IMO. Germany’s going after adblockers. Shit’s bad out there…
i’m not sure australia is a real place tbh
I checked the list of countries of Europe, America, Asia & Africa and I couldn’t find it. It’s definitely not real.
You’re confusing it with New Zealand, which is clearly made up.
Agreed, they are confused.
Australia is where the spiders and kangaroos are.
New Zealand is where the hobbits are from, clearly imaginary.
australia also has robert irwin which is the only good thing to come from there.
What about The Wiggles?
hey now bluey is great
Please post this to r/Unitedkingdom.
I recently looked through the requirements on Ofcom’s website, and to me it sounded like every email service falls well into their “user to user communication” category, which would have to “assess the risks”. It’s not really different than communicating in an internet forum, except it’s not public, but that’s not really a factor i think. Sending porn via email is probably as old as email itself.
Email providers cant moderate their users’ mails (i mean they could try, but that would likely be the end of them for the obvious breach in privacy). And having people have to age-verify for an email account would be ludicrous, especially considering children need emails for school, etc.
I wonder if they ever clarified anything about email services and how they would or would not be affected by this bullshit law.
You can get porn in a google image search, even in the UK. No ID or login required. I did see a comment about it not applying to search engines, which really does make you wonder what is the fucking point!!
Tracking and spying on the population.
Yeah i dunno how people still don’t get this.
So a company can collect copies of everyone’s ID cards.
The UK doesn’t have ID cards.
Are you sure about that?
The UK seems to have passports and drivers licenses. Screenshots from the age verification dialog boxes on websites allow you to verify your age with an ID card, because they do exist.
How are they verifying age? Which offical ID are they requiring?
Door to door mail could be considered user to user too. Oh wait, I shouldn’t give them ideas.
I wonder if they ever clarified anything
No
Are you over 18?
- Yes
- No
This isn’t considered verification in the UK from what I can tell. Companies are now implementing AI face scans, ID checks and credit card verification to comply with the UK law. I’m not a lawyer or even British, but it wouldn’t make sense to me that companies would spend money to turn away their UK customers otherwise.
How are they checking that your website’s face scans are actually ‘working’ and not just passing everyone?
Also what stops someone just getting OBS virtual webcam and just feed it stock video of some old geezer…?
They make you do things like open your mouth and smile
You’d have to use a video game… Which people are doing
New business idea, renting out your face via video feed to let people bypass age checks.
You’re not thinking big: Rent out other people’s faces!
Instead of an actual click farm where slave workers click phones all day, you make an app.
The app works like this: When the users (or let’s call them: “Partners”) get a notification from your app, they just have to smile at the camera, sometimes do other expressions. They are then rewarded with points which they can trade for for actual real life discounts on real online stores. Something like 1 cent per picture.
You now setup a service for people who want to bypass facial age verification and feed their requests directly to the app for a small fee of 5 cents per verification.
Rough business model to compete with free
The video game trick doesn’t work everywhere. I don’t know about deepfakes and such, both how easily available they are and how good they are at tricking the age verification.
Even if 3D images are required, surely there are 3D deepfake faces people can wear. But anyway, we’re being distracted by the part of this law that stops kids going online. The quiet part is the part that gets every adult to show their real face to some website. Those adults need deepfake faces just as much if not more so.
I have an idea. Cardboard cutout masks.
That’s never going to pass for a real person.
I know about Online Safety Act, I was making a comparison between the system shown in the screenshot and the one I mentioned
Enter your birthdate:
01/01/1970
It says in the description that ID is required.
Just photoshop something together with a funny name.
It was my attempt at a funny comparison between that system and the one shown in the screenshot
Clever girl
TOR. The answer is TOR
Bandaid to a gunshot wound.
The answer is to make all those politicians (and that person who wanted to profit off from facial recognition) defending this law to regret even existing.
You’re not supossed to capitalise it iirc.
Fantastic!
Ironically, you can just lie to get past it.
Sometimes :3
