upvote
Half the laws we're complaining about (e.g. California, Illinois) are literally just regulating parental controls, and I can no longer give the benefit of the doubt to people who act as if this is the same as forcing internet users to scan their ID. People who conflate these two things are paid lobbyists of Meta to make sure Meta won't have to be safe for children even when the parental controls checkbox is turned on.
reply
But the other half are. UK, Brazil, Texas, Virginia.
reply
I seem to recall the bad part of the UK OSA was the requirement to write a plan about how you'd protect minors and submit it to the government, not anything to do with ID verification directly (although that's one way to design such a plan)?
reply
Regulating parental controls by making you scan an ID to use a computer is even worse than doing it to access a website. I understand that today's laws are not doing that, but do you genuinely, truly believe in your heart of hearts that once every OS has mandatory age fields, that nobody is going to start proposing legislation to attempt to enforce its validity by ID verification + hardware attestation? You're not willing to give the benefit of doubt to people with concerns about this, but you are willing to give the benefit of doubt to the surveillance states that have been pushing us down a slippery slope for 25+ years, sliding further and further down every single year without reprieve?
reply
Of course that is not parental controls. That's 3rd party controls. Parental controls means you create a child account for children and when a site is detected as being adult ideally using RTA headers [1] then a password prompt asks for the parents approval. That is parental controls.

[1] - https://nochan.net/b/Internet-Crap/20230829-Think-Of-The-Chi...

reply
Indeed, that's a reasonable approach. Just to clarify that we're agreeing, the comment I was replying to was strongly defending California and Illinois' laws that require the OS record an age field for the primary user of the device, which while currently self-declared is at least an obvious path for future, more invasive legislation.
reply
The problem with a self declared approach is that puts a signalling mechanism in place. Once in place the laws can easily scope creep year over year to add more information or require putting in ID information or some future nation-wide digital ID and Trump coin digital wallet which could easily be the plan all along. All they need is the API that will interface with websites using some agreed upon standard and then it can easily be extended line by line. Give them an inch, they will take a mile.

With proper parental controls there is no signalling.

reply
Ensure system does not have this information:

    loginctl show-user $USER 2>/dev/null
    userdbctl user $USER --json=pretty 2>/dev/null | grep -i birth
Confirm field is not set

    homectl inspect $USER | grep -i birth
If it is set, unset it

    sudo homectl update $USER --birthday=""
Tell your favorite AI what OS, kernel version (matters if using a locked down kernel) and browser is being used. Ask for a systemd service that uses bubblewrap to prevent access to systemd, set whatever other limits like memory and CPU usage.

If the browser gets passive / aggressive updates if they mimic Microsoft and refuses to run if there is no age set then script a random age or age range on each login so that it is not used for tracking.

reply
They can do that with or without an existing law.

Without signaling nothing would happen. There's always signaling.

reply
You're doing the thing. The half I'm talking about, they don't make you scan your ID to use a computer. Actually I don't think even the worst ones make you do that.

You're doing the slippery slope fallacy by saying "well if there are not terrible laws now that just means there will be terrible laws later." A law against murder doesn't mean there will later be a law against farting.

reply
What law anywhere in the US is specifically forcing the physical scanning of an ID to use a computer?
reply
> I understand that today's laws are not doing that,

Come on. Like 80% of my entire post was devoted to pointing out a gradual erosion of rights over time, and I explicitly stated that it's not the case today.

reply
Sorry, I didn't read that far. I do think this is a classic slippery slope though.

But don't underestimate human adaptability. Slippery slope arguments assume that once a technology introduces a specific risk, society lacks the agency to create counter-measures, new norms, or alternative uses for that technology.

I haven't found that to be the case throughout most of history.

reply
> Half the laws

If you forgive the slight exaggeration in my use of "always", then I am half right - in fully half the cases, deanonymization is the first thing they try.

But let's look at those "just regulating parental controls" laws, the California one [1]. What does it do? Does it give parents/the owner the tools needed to limit child access? Does it require vendors to include such tools? No, neither of those. It just establishes how to collect (but not verify) and send age data, so someone else can act on it.

It does nothing to empower parents, but does lay the groundwork to grow an age control ecosystem that can later have verification easily added - all the apps and websites will already support it. Not all "regulation" is the same.

> People who conflate these two things are paid lobbyists of Meta

Meta is the most privacy-hostile company there is, despite fierce competition for that title, and nearly all their services are behind a login-wall, even read-only access, and they don't let you make an account without a phone number [2,3,4]. I avoid them like the plague, and they already go above and beyond what you would want of them.

[1] https://en.wikipedia.org/wiki/California_Digital_Age_Assuran...

[2] https://www.local3news.com/local-news/what-the-tech/what-the...

[3] Facebook now treats a phone number like a near-requirement - https://quackr.io/blog/facebook-account-without-phone-number

[4] https://www.reddit.com/r/privacy/comments/tyrs6c/so_i_had_to...

reply
[flagged]
reply
We could very easily push for giving parents the kinds of control and auditing that hackers, manufacturers, and governments currently have
reply
[dead]
reply
Tech people keep ignoring the fact that many people a) find the parental controls too hard to use and b) have no confidence that their kids won't find a way to circumvent them.

If parents felt in control of technology they wouldn't be calling on governments to regulate it in the first place. I know a lot of tech people like to assume that government wants to control everything and these parents are fake front groups established to manufacture consent, but this is infowars-type conspiracy thinking. Most people are just not that facile with technology and people who have kids are atavistically opposed to anything that could harm their kids.

Tech people's unwillingness to even engage with concerns about harm to children (eg the GP) more or less guarantees more aggressive regulation. IT's a self-defeating position.

reply
I recently put some thought into what I would have done if I had encountered "parental controls" to use the Internet when I first encountered it as a young teen in 1992. I would have made it my personal mission in life to circumvent everything and anything possible. I feel fortunate that no such controls existed and the adults in my life knew significantly less about the technology than I did.

Was I exposed to some clearly adult content? Yes. But I didn't find it particularly compelling, the video games I could download and other things I could explore were more interesting.

It is also concerning to me that gen-alpha (or whatever the age bracket is called) people are increasingly being pushed into walled garden, app-based social media platforms instead of actually learning what the Internet really is, and what it's capable of.

reply
My dad added parental controls to our PC sometime around 1997. It also had Eudora installed, which my dad used for email. Poking around, I found the ini file that had the ciphertext of the password for the email server. On a whim, I made another account in Eudora and put the ciphertext in as my password. In the ini, the plaintext of the password came out; I guess Eudora used some symmetric rot16 or xor like cipher! The same password worked to unlock parental controls, which had taken me just about a week to circumvent.
reply
Agreed. I was a middle-schooler in the 2000's, had my own PC in my own bedroom, we had broadband access and I, of course, was exposed to porn while I was trying to download cracks and keygens on Astalavista and other such sites. Mislabelled files on eMule too. Links to porn also were readily shared on IRC channels. But yeah, I can't say it had a damaging effect on me.

It was a mix of being afraid of getting a virus from a porn site, knowing that porn wasn't for my age, and late-night FTA TV airing softcore anyways.

My parents told me to be responsible and kind of explained the dangers of the world the best way they could, and it was expected that I'd be grounded and lose computer access if they found me on a porn site. I preferred playing games. I definitely encountered some dark places on the clearnet (and on the darknet as well) and promptly GTFO.

At the school's computer lab they had plenty of content control which I had the most fun trying to bypass them. For what reason? Just so I could.

reply
You see how that isn't nearly as bad as the current state of society though.
reply
Eh, the ugly side of humanity was just a click away on the darknet, and I got my share of bait and switch beheading videos on IRC chats.

It was always there, society hasn’t changed. This shit wasn’t monetized back then though.

reply
As usual it seems education is the only long-term solution. Forcibly keeping people out just makes them want it more.
reply
I have a feeling we had a similar experience growing up. I generally agree, but also, we got QAnon/Alex Jones and such which have quite directly screwed up my country. So I don’t know, my opinion is often contradictory and fluid. I don’t know where I stand anymore. I believe in an “open internet,” but also, there’s people like Andrew Tate who have ruined the minds of people I care about.

We can debate if these systems and people existed before (they did), but the reach and scale is different now. My most controversial opinion these days is that not everyone should be allowed to upload to YouTube if it’s public facing. We need basic screening and filtering.

reply
One personal observation, the early commercial internet as it was transitioning from universities/research labs/certain high-tech firms into a mass market thing with millions of users, it had its share of nutjobs and crazy as well. But it was boutique, hand crafted , personal level crazy and it was for the most part disregarded because none of the whackjobs could collect a sufficient following or megaphone to spread their message.

For instance in about 1994 I remember coming across a set of textfiles that were some lengthy manifesto about how the US government had supposedly manufactured AIDS in a lab somewhere. But it never got any traction.

Now we have the unfortunate venn diagram overlap between something like a Tate and a major social media platform, and he can get his message out to millions of angry, horny, unemployed young men...

reply
> For instance in about 1994 I remember coming across a set of textfiles that were some lengthy manifesto about how the US government had supposedly manufactured AIDS in a lab somewhere. But it never got any traction.

There was a BBS in my area that ran on a small bank of 14.4 USR modems that had a gold mine of content like that. It was such a fun time.

reply
> We need basic screening and filtering.

Based on whose values and criteria? Yours?

Beware of he who would deny you access to information, for in his heart he dreams himself your master.

reply
I am sick and tired of the argument that porn shouldn't be kept from kids because what if someone thinks it's healthy for kids to watch porn (and for all I know it might be, since I haven't sent the scientific evidence).

If some parent thinks that's healthy they can just enter the child's age as 18.

reply
> "...not everyone should be allowed to upload to YouTube if it’s public facing..."

You still fantasize about building mechanisms for restricting information as if the very people you oppose won't use it on you when they get into power; no, as if the very people you oppose aren't _currently_ ascendant or even in office and would delightedly use it against you right this moment. Madness.

When you build a high tech muzzle, remember that it will fit onto your head just as well as it fits those you built it for.

reply
> controversial

Is that how they’re spelling the r-word now.

reply
In which decade did “the kids” in your country have “good ideas”
reply
Parents can stop giving kids smartphones.
reply
I got my own smartphone at 15.

Which is probably about the transitional age where it's okay to start having one if you didn't before, and using it without your parent's full control. But other people might get one when they're 12.

reply
I don't think this is a viable or realistic option in 2026/2027. Try to imagine what your own personal reaction would have been when you were 14 years old if 90%+ of your peers had an iphone 17 or equivalent and your parents gave you a flip phone, and tried to ban you from using smartphones.
reply
Why repeat the same argument if it clearly hasn't worked? Do you expect it to suddenly become effective?

Change in behavior can only follow from change in incentives. Parents must be held legally liable if they allow their children access to social media. That means jail time for negligence.

reply
Why would we even consider jailing parents before banning social media from kids and jailing Mark Zuckerberg for pushing it on them?

The power imbalance between individual parents and big tech is immense.

How can we be mad at random parents for not defeating the most powerful and rich people in history?

reply
Because according to HN there's no way to force social media companies to not serve children without destroying privacy. That leaves parents who aren't changing their behavior because nothing has incited them to change. Legal liabily is an incentive that changes behavior.
reply
Maybe not everyone agrees that social media causes literal cancer. I mean it’s not great, but it’s not the worst thing on earth, either. It’s clearly become a moral panic at this point.
reply
If we define cancer as "that which replicates without regard to its host" then social media has actually caused a huge number of cancers.
reply
Supposedly the incentive already exists because parents want their children saved from the harms of facebook and social media. The story is that parents are clamoring for the government to do something about it. I don't think parents really are, or where they are the expectation is that the social media companies will be forced to change their behavior, not that parents will be forced to start parenting their children or be forced to provide a scan of their face and passport every time they do an internet search.

The government has just decided to fall back on "think of the children" as a way to implement more surveillance and control.

reply
Polls show overwhelming support for governments to do something about kids on social media.
reply
The incentive for parents to stop giving their children smartphones does not exist. If it did exist, it would incite parents to perform the action: ie not give their children smartphones.

Incentives incite action. No action. No incentive.

reply
That's not true. Incentives aren't the whole cause of behavior and they aren't the solution to changing it either. That's the same simplistic and flawed mentality that pushes for harsher punishments to deter crime when the evidence shows that doesn't work and that not even death penalty is an effective deterrent. People have several incentives to lose weight, but increasingly they still overeat.

Incentives play a role, you don't want to encourage wrong behaviors certainly, but they're just one factor in determining what people do or don't do. At best, they nudge. Those nudges aren't likely to overcome stronger forces, or even several weaker ones.

reply
I'm sorry, but that is simply wrong. You're confusing desire/intention with incentive.

Someone may have a desire or intention to lose weight. But unless they lose the weight they lack incentive.

It's simple: incentives incite action. Don't make it more complicated to win an argument.

reply
> Someone may have a desire or intention to lose weight. But unless they lose the weight they lack incentive.

Here are just some of the incentives overweight people have to lose weight:

They'll look better, to themselves and others. They'll have more clothing options. They'll feel better. They'll be healthier. They'll have drastically lower odds of many future heath problems. They'll live longer which means they can spend more time being with their loved ones.

Those are all incentives. Everyone who is obese has those incentives, even though different individuals may assign different values to them. Even with all those incentives that hasn't stopped the obesity problem. incentives don't incite action, but they can encourage them.

incentive noun [ C or U ] Something that encourages a person to do something by offering them a reward (https://dictionary.cambridge.org/dictionary/english/incentiv...)

You can have a ton of encouragement, but that doesn't mean it will be enough to incite a behavior. What definition of incentive are you using?

reply
And the incentive to not lose weight: food is tasty
reply
https://www.merriam-webster.com/dictionary/incentive

It literally says incite "to determination or action". Given that parents aren't actually taking smart phones away, neither determination nor action are present.

I'll grant you the examples you give incite people to desire to change weight just as negative consequences incite parents to desire that "something should be done," but it doesn't incite them to actually do something.

Describing something as incentive because it incites desire without changing behavior is not exactly what I think of when I think of incentives.

Think of being in the position of trying to come up with incentives for a group of people. Would you call your incentives successful if they created a desire in that group without anyone actually doing anything differently?

reply
You missed the "or has a tendency to incite" part. It's important because incentive doesn't promise a change in action. People can do things even when they have have no incentive to do it. Sometimes people will even do things when they have every incentive not to do it.

If I were going to try to come up with incentives for a group of people, I wouldn't try to create a desire in them. I'd try to give them something they already desired as a reward for doing what I wanted them to do. They'll probably never want to do the thing I want them to do. They might hate doing it. If the incentive is high enough though they just might do it anyway. If my incentives weren't enough to sway them, they'd still be incentives, just ones that were inadequate/ineffective. I wouldn't even be surprised if they failed. Incentives fail to cause changes in behavior all the time.

reply
Well, I'm sorry parental controls are too hard to use, but all of the parents who want all other adults to sacrifice their online anonymity just to make to for it need to get their heads screwed on straight. They're screwing a) themselves b) everyone else and c) their own children when they reach adulthood.
reply
What about the ones who don't buy just want the government to say parental controls must work and every device must have them
reply
On one hand the software world needs to re-learn the lost art of proper UX research and rely on data from user trials instead of on vibes and reading tea leaves with analytics, but on the other hand parents have a wholly unrealistic expectation of being able to keep their kids in a hermetically sealed bubble until they turn 18.

Kids are going to get into stuff you don’t want them to no matter how hard you try to prevent that, short of keeping them in locked padded rooms with no electronics (which would be abuse). Parents are right to want to steer them in the right direction and keep them out of the worst trouble, but that’s as far as it goes.

So really, both sides need to improve here.

reply
Parents aren't calling on governments to regulate it. Implementations like Apple's Client Side Scanning was not a populist movement, and many savvy parents spoke up about how it crossed multiple lines that set the stage for authoritarian abuses. Apple got so much flak for entertaining the idea that they had to drop it, there was no way to come out looking benign with it.

This is the "Christian moms need Congress to regulate Cable TV" problem all over again. Don't let them watch TV if you oppose what is on it. It's not HBO's responsibility to raise your child, it's yours.

reply
Can we stop pretending an online porn blocker is the same as AI scanning the photos you take and uploading ones it doesn't like?
reply
This continues to be an absolutely false characterization of what Apple was planning to do, which it was doing BECAUSE IT WANTED TO SUPPORT USER PRIVACY
reply
Um no, Apple didn't scan all your pictures and upload some to Apple because it supported your privacy.
reply
There was a time when users falsely characterized Dual_EC_DRBG as "private" because Dell's whitepapers looked good. History proved those users to be chumps.
reply
Plenty of us survived the internet when it was an even wilder west, IRC chats with strangers trying to learn perl, not putting your name and social security number into random websites. Being aware of predators. It's a very specific kind of power-hungry move fast and break things tech that refuses to accept responsibility of the fallout.

Anonymity, the right to move privately and be private online is much bigger than parents who are frustrated with out of control capitalism.

Besides, this only benefits the big corporations. They of course will happily back anything that absolves them of their sins.

reply
It was a noncommercial wild west. You were up against some troll trying to get a reaction by linking you to goatse, not some trillion dollar international corporation with a literal army of addiction experts A/B testing how to maximize engagement.
reply
[flagged]
reply
I fully appreciate that you care more about anonymity on principle, but it seems very naive to assume that principles are necessarily going to win out over the demands of aggrieved reactionary parents. Cranky parents are very consistent voters and providers of tax revenue in most polities and politicians want them to be reasonably happy and quiescent for the sake of stability. It seems to me you are wildly underestimating the size of your potential opposition.
reply
You won't go far by calling everyone you disagree with, cranky, aggrieved, and reactionary. Maybe take some time to understand their concerns and you won't be so surprised when their vote wins.
reply
Are aggrieved reactionary parents demanding that they should have to scan their face to look at websites? It seems to me like they just want social media companies to be forced to change their harmful and predatory practices and that instead of properly regulating the bad behavior of social media companies the government has decided to use this issue as a means to give themselves more surveillance and control.

We don't need to make parents the enemy of our online privacy. We just need parents to reject the idea that they have to give up their identity and the identity of their children to every shitty social media company and shady website on the internet to "protect" them.

reply
Certainly I think they'd be happy if social media companies changed their behavior, but the problem is that they and the politicians don't really know how to make them do that. So the next best thing they can think of is a digital version of 'you can't come in here if you're under 18' similar to nightclubs, betting shops etc.

We just need parents to reject the idea that they have to give up their identity and the identity of their children

OK, but (as I have asked many times before) what is your alternative, beter proposal? People intuitively understand the idea of checking ID to prevent sales of alcohol to minors, keep teens out of adult spaces and so on, because virtually every adult remembers being a teenager and not being allowed to do certain things due to not being old enough. That makes checking identity an easy sell to people.

What is your better idea that is similarly easy to sell? Because if you don't have one,people will fall back on the mediocre idea of ID checks. I feel like anyone working in the tech field should understand that the best technological solution does not always win out.

reply
> OK, but (as I have asked many times before) what is your alternative, beter proposal?

How about laws that prevent social media websites from pushing harmful content users didn't ask for? How about forcing them to abandon the practices and dark patterns that result in those platforms being addictive? How about putting executives behind bars when their algorithms are shown to cause mental health and body image issues in children? These platforms know that what they're doing is hurting people, but they don't care because they're profiting from it. These companies intentionally designed systems that are harmful and user-hostile. They've got algorithms that seek out and target people's vulnerabilities. They ignored repeated warnings from their own researchers, and actively concealed evidence of the harms they were causing. We don't have to let them do it. Not to children or anyone else. Facebook isn't going to die off if they go back to showing people only things their friends and family post. It might even get more popular. They might make fewer billions though and that's unthinkable to them.

There are a lot of things that can be done, but the government isn't interested because actually solving the problems social media causes isn't going to give them the power they're actually after and it could cause them the bribe money they get from these companies.

reply
Well you're articulating the result you want, but not the mechanism for how you expect to achieve it. A law has to articulate which behaviors are legal or, and what the penalties for non-compliance are. Otherwise we could just pass laws saying 'the economy has to make everyone prosperous, people have to feel safe and fulfilled' and call it a day.

So, what actual rules do you want to make in service of these desirable outcomes? They have to be clear and straightforward enough that they can't be just gotten around with clever lawyers or argued past the point of meaninglessness by shills posing as philosophers. I do not like the idea of everyone having to show ID online (or even much in real life), but I can see why it's popular because it's very easy to explain and understand.

reply
What I'd recommend is research on specific behaviors taken by social media companies to determine which are shown to cause harms. Some of that is already done by the companies themselves. If, for example, infinite scrolling is seen as a practice that increases addiction to the platforms, a law can be passed that makes it illegal to implement infinite scrolling. A law like that is pretty easy to explain and understand. TikTok was called out for sending push notifications to children's phones late at night to drive compulsive consumption and disrupt sleep patterns. Laws can be passed to limit how many unsolicited push notifications platforms can send and during which hours. Laws like that focus on the actual problems themselves, regardless of which platform is doing it, or who they are doing it to.
reply
So let's say I have a business SaaS application, am I banned from showing content in an infinite scroll window? How would I prove my application is targeted for business users and not actually targeting children?

Not saying these are impossible questions to answer or get right in a law, just that there are more things to think about than which component you decide to show data inside.

reply
You wouldn't have to prove that you were or weren't targeting children. You'd just have to operate a social media platform and allow infinite scrolling.

The law would define a social media platform. Maybe something like: The term “social media platform” means a website or internet medium that— (A) permits a person to become a registered user, establish an account, or create a profile for the purpose of allowing users to create, share, and view user-generated content through such an account or profile; (B) enables 1 or more users to generate content that can be viewed by other users of the medium; and (C) primarily serves as a medium for users to interact with content generated by other users of the medium. [https://www.law.cornell.edu/definitions/uscode.php?def_id=42...]

If your SaaS app met that definition of a social media platform it would be illegal for you to show content in an infinite scroll window. Because your application targeted business users who paid for the service, people would be less likely to sue you. Maybe it'd be worth it to you to include infinite scroll anyway. Companies knowingly break the law all the time after calculating that even on the off chance they get caught the fines they'd face will probably be less than the profit they'd make. The larger your platform got, the less worth it breaking the law could become and of course if the public felt the fines were so low as to be ineffective, the law could be amended to increase the fines.

The law could even allow some platforms to include harmful content like infinite scrolling if certain conditions are met. For example, platforms could be allowed to include infinite scrolling if they require a credit card to sign up, and they display a warning explaining that the platform uses infinite scrolling which has been determined to be harmful by promoting addictive and compulsive behaviors, and it provides an option to disable that feature. Still, it's probably better to widely ban those kinds of practices that serve no purpose other than driving engagement/addictive behavior. We can just decide as a society that we value people's mental health more than maximizing tech billionaire profits.

reply
The EU has been pretty successful with rough definitions and "I know it when I see it". The Digital Markets Act just specifies which specific companies are too powerful and need to be regulated, and a process for adding more.
reply
I'll give them credit for doing a much better job than the US does. I still think they could go a lot farther. There was tons of praise for GDPR as having actual teeth, but there are still companies who are getting fined again and again and again because the violations of the law are making more money for them than the fines they have to pay when they get caught.
reply
deleted
reply
> I know a lot of tech people like to assume that government wants to control everything and these parents are fake front groups established to manufacture consent, but this is infowars-type conspiracy thinking

You may not be aware of this, but Meta has been actively spending millions of dollars to redirect the rage against their algorithms and addictive harms, especially against children, and one of their strategies to try and help avoid liability is to put the onus on the federal government to pass ID legislation, to literally make it easier for Meta and similar companies to age gate most content under simple blanket policies. The way that they are doing this is by funding otherwise very small "parents rights organizations" with money and connections they otherwise wouldn't have. What does Meta gain from this? Less liability and lower cost in content moderation. What do the parents rights groups get? "Check ID laws".

That's enough motivation for both groups, it's very simple.

Now where do you get into "conspiracy theory" territory? Well thetr are also other groups that want online ID for their own purposes, and they are more than happy to help fund these groups to get something they also want.

All of this is very easy to provide backing links for with a simple Google search, if you're interested.

reply
I'm very aware of that. As I said in another comment, 'ID checks to exclude minors' is a simple and intuitive idea that's very easy to sell; qualities that are singularly lacking in alternative proposals.

How should online services be regulated to mitigate algorithmic harms? To get something over the line politically, it needs to be simple enough that it can be articulated in a few sentences.

reply
> How should online services be regulated to mitigate algorithmic harms?

That would be a good conversation to have!

Instead what is happening is moneyed interests are inputting hundreds of millions of dollars into organizations that otherwise wouldn't have it, which is giving an "unnatural" amount of political influence to those groups, which is changing our country, and not just on this issue. They're literally doing it just to keep their money, and ID checks let them keep it without actually reducing the harms.

reply