Source: https://infosec.exchange/users/isotopp/statuses/115059833470035521
Transcript
Age Verification
Due to applicable UK laws, websites must verify the age of visitors using official ID to confirm they are at least 18 years old. We are a small site and unfortunately do not have the resources to implement such a system, so we are unable to serve users in the UK.
We are not required to verify your location, so please confirm below:
[I am not in the UK] [I am in the UK]
This isn’t considered verification in the UK from what I can tell. Companies are now implementing AI face scans, ID checks and credit card verification to comply with the UK law. I’m not a lawyer or even British, but it wouldn’t make sense to me that companies would spend money to turn away their UK customers otherwise.
How are they checking that your website’s face scans are actually ‘working’ and not just passing everyone?
Also what stops someone just getting OBS virtual webcam and just feed it stock video of some old geezer…?
They make you do things like open your mouth and smile
You’d have to use a video game… Which people are doing
New business idea, renting out your face via video feed to let people bypass age checks.
You’re not thinking big: Rent out other people’s faces!
Instead of an actual click farm where slave workers click phones all day, you make an app.
The app works like this: When the users (or let’s call them: “Partners”) get a notification from your app, they just have to smile at the camera, sometimes do other expressions. They are then rewarded with points which they can trade for for actual real life discounts on real online stores. Something like 1 cent per picture.
You now setup a service for people who want to bypass facial age verification and feed their requests directly to the app for a small fee of 5 cents per verification.
Rough business model to compete with free
The video game trick doesn’t work everywhere. I don’t know about deepfakes and such, both how easily available they are and how good they are at tricking the age verification.
Even if 3D images are required, surely there are 3D deepfake faces people can wear. But anyway, we’re being distracted by the part of this law that stops kids going online. The quiet part is the part that gets every adult to show their real face to some website. Those adults need deepfake faces just as much if not more so.
Oh yeah, definitely. That is indeed the purpose of this and the problem here
I have an idea. Cardboard cutout masks.
That’s never going to pass for a real person.
I know about Online Safety Act, I was making a comparison between the system shown in the screenshot and the one I mentioned