Source: https://infosec.exchange/users/isotopp/statuses/115059833470035521
Transcript
Age Verification
Due to applicable UK laws, websites must verify the age of visitors using official ID to confirm they are at least 18 years old. We are a small site and unfortunately do not have the resources to implement such a system, so we are unable to serve users in the UK.
We are not required to verify your location, so please confirm below:
[I am not in the UK] [I am in the UK]
Frankly this is a comically brilliant and absolutely outstanding example of engineering malicious compliance
Sadly, will not actually be sufficient. They put the full burden of this shit on the site owner, all of it, without exception.
You could host in a country like Cameroon, they won’t give a shit and EU won’t bother going after them. They could geoblock the whole country however.
The Great Firewall of TERF Island
we can compromise and just firewall jk rowlings house
Would the firewall replace her mold wall?
Meh you just say “we don’t serve users from your country, we are not bound by your laws. users from the UK are breaking our tos”
that’s not super convincing though… just like TOS isn’t a protection for murder and other serious crimes, it can’t protect against all things. i’m not sure how the law is worded, but it’s not quite so cut and dry
This already happens occasionally with the EU’s GDPR.
it does, but i don’t think they’re actually following GDPR… GDPR applies to residents of the EU; not where they are accessing the content from… technically, if an EU resident accesses a non-GDPR-compliant site while visiting the US (etc), the site is still legally obligated to follow GDPR
it’d be way to difficult and probably ineffectual to enforce since the entity doesn’t necessarily exist in the EU (and they have bigger fish to fry, among many other reasons), but technically it’s there and they could probably do things like blocking executives from entering the EU or arresting them if they enter
Yup, that’s what we’re saying. Some sites don’t work in EU because they don’t want to comply with GDPR, so it’s likely some sites will stop working in UK because they don’t want to comply with their anti privacy laws.
UK left the EU, so the EU won’t be doing anything regardless of your host country.
It’s pretty sufficient. I’m not British, I don’t sell products in Britain, I do not have British assets, and I’m compliant with all American laws. They can levy all of the fines they want but I’m not obligated to care.
unless you ever want to visit the UK
of course if you don’t ever want to, that’s fine… or if you’re small enough to fly under the radar
but just because you have no presence doesn’t mean you’ll never have any presence