Aren't parental controls already in place on most mainstream things?
I'm not sure how much more accommodating for the less technically inclined it can get than settings > parental controls > enable.
afaik parental controls do not exist on degoogled android. windows has it with third party tools, linux does not have any
I think you described what Apple implemented for its Declared Age Range API. The API has one additional privacy protection, which is that the API only gives age bracket information rather than precise age.
100% for better tools for parents. I helped set up the Google parental control on the phone owned by my ex’s sister and it was so buggy with the app not even scaling properly on their mum’s iPhone 6S back then.
There are numerous options to choose from already existing... Yet, some should just consider that the recent "age verification" were initiated for another purpose than a general age verification process. Have you checked out the recent Persona source code exposed?
Regardless, some civilian approaches to be mentioned is how the verification is handled in Baltic countries, that is Lithuania, Latvia, and Estonia, for example:
Smart-ID is the easiest, safest and fastest way to authenticate yourself online, register in e-services and sign documents...
Smart-ID can be used to log in to e-services, for online banking and for signing documents.Source: https://www.smart-id.com/
---
Smart-ID itself has no age restrictions for its users – but age limits have been set by identity providers and depend on the Smart-ID account type and authentication method chosen...
Creating a Smart-ID account for a minor requires a parent/legal guardian to authenticate their account...
Don’t just click “continue”: read the instructions on the screen carefully and double check that all the information you enter is correct, and the whole process will be easy and stress-free... The child cannot continue with their registration until we’ve got one parent approval...
For the API, for instance:
# Where can I find users date of birth?
Birth of date is encoded into personal identity code. Latvian new personal identity code format is exception though. Special birth of date field will be added to Smart-ID certificates in stages and only for Qualified accounts.
For convinience
smart-id-java-clientandsmart-id-php-clienthave special functiongetDateOfBirth... for that. For getting that info directly from certificate seegetDateOfBirthCertificateAttributeandgetDateOfBirthFromCertificateField.
Similar to Latvia, the number of Estonia and Lithuania has the date of infinitely magnificent event as someone's date of birth, too!
The ways in which such a system is implemented vary among countries, but in most cases citizens are issued an identification number upon reaching legal age, or when they are born...
In Estonia, a Personal Identification Code (Estonian: isikukood, abbreviated as IK) is formed on the basis of the sex and date of birth of a person...
In Lithuania the Personal Code (Lithuanian: asmens kodas) consists of 11 digits, and currently is in the form G YYMMDD NNN C, where G is gender & birth century, YYMMDD is the birthday, NNN is a serial number, C is a checksum digit...
/* ... */ C = lt_nin_checksum("3840915201");
Therefore, there should be an option to verify the age without the personal identification code. And if not, just a personal number got within the age verification scope, transferred within secure government session channel, should be enough. The government, in turn, won't share such information with untrusted services - access to the API.
Related: Age verification online (...can be done safely and privately. Here's how...)
Your last link gives a 404 error :/
Thank you! Fixed!
It had a redundant character > in the URL path I accidentally added during the formatting.
Make 3 non-profit companies that provide verification but just always return true
we can barely get adoption of nsfw tagging/metadata..
that said, this is prolly somewhat already trivial by setting an os/global environment var. and just having that bubbled up to the browser/app level. theres already paths for this to be used, but again.. adoption is far more difficult than the technology required.
The only input should be birth year of the child whose account is being set up. No other personally identifiable info should be included.
Found a bug. You're trying to reduce the information, but you can't extrapolate someone's age from their year of birth. You need the full date to compare with the current date. Storing someone's full DOB is obviously more PII but it's essential.
From a policy perspective, one compromise is building in this kind of ambiguity, for privacy sake. When policy specifies 13 years+1, the tradeoff is a max of +364 days in the worst case: someone who we know is born in 2015, is def 13 in 2029
That is intentional. It provides a reasonable approximation of age while maintaining privacy. The big gaping hole someone pointed out to me is who gets to determine what is blocked? I don’t have a great answer for that. I imagine it would be the type of thing settled in courts. Personally, my biggest concerns are social media and access to AI. I think those two things are more harmful to the development of young minds and their mental wellbeing than anything NSFW.
If your local laws say you need to be 18 to be considered an adult, then depending on the year, you're either going to be denying an adult access for (average) six months, or illegally letting a child have access for (average) six months.
The laws can be written to reference the approximate age. Antoine who will be 18 by December 31st of that year could be considered 18 for the purposes of the law.
That's never going to fly. Imagine that person posting nudes, which would be considered illegal by that same lawmaker.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
much thanks to @gary_host_laptop for the logo design :)