By demonizing them and failing to engage with the worries over social media and pornography We have brought it on ourselves.
Is it to be wondered at that many people are angry when tech companies have polluted the commons with their effluvium?
Believe it or not, sometimes the best answer is to do nothing until the crowd moves on to the next panic, as with the “Satanic Panic” in the 1980s. Turns out D&D was not actually a gateway to Satan worship.
That said, I’m a father of 3. I’m a millennial and tech worker. I have the digital literacy to teach my kids about the internet and its horrors in a safe way. Not every parent does, so passing this off as a “parent better” issue doesn’t solve anything either.
I dunno if you can legislate “better parental control ux”, but I’m open to similar ideas so parents can get some support without compromising on privacy.
If we must have something, I’m in favor of the OS-level flag where a parent can set the device as belonging to a minor and the apps and browser can receive the flag. Lock it behind the most basic parental controls that can be protected and remotely monitored. There are some loopholes with kids downloading apps that allow custom web requests without the flag being sent, so there probably needs to be an app allowlist or special App Store category to match.
Carve out some legal exemptions for Linux distributions that no kids are using and leave it to the iOS, Android, Windows, and Macs of the world. Any parent who doesn’t like the idea doesn’t have to enable it on their kids’ devices.
Parental controls already exist. Lawmakers want to step in and parent peoples' kids for them by removing these freedoms from everyone.
Why would you think that? Most of my friends are parents now and all of them are quite concerned about the effect of social media, phones, and technology more broadly.
Basically all of them are planning to delay exposing their kids to phones and screens for as long as possible.
The sentiment of "keep my kids safe on the internet" definitely comes from parents. Yes. We agree.
How we actually get there in a privacy-respecting way is the issue.
Parents do not have the time or energy to configure modern parental controls which work more like tuning firewall rules.
The other part of the problem is you need collective action, if you ban your child from Facebook, they won’t get invited to parties anymore. If all children get banned, the parties will be arranged over sms or some other non social media. As it is today, banning your kids from social media is overly punishing since all the other kids are using it.
If we actually cared about supporting children and parents as a country, parental controls and access, and making sure that systems were actually safe and protected privacy, would NOT be an afterthought.
The polling I have seen from Germany and Australia of a social media ban for children was quite in favor of it. Sentiment here on HN and on Reddit was the polar opposite. We are in a bubble.
The answer every time is “well then Google/Apple/Facebook/Shopify/mcMaster Carr shouldn’t exist as a business” and if I’m being honest that is not an achievable target so you’re going to arrive at the attested internet.
I'm not trying to call everyone else voting for these things dumb, but does the average person who doesn't think about this stuff for a living actually know what they're voting for?
There is a really good way to do this that solves most concerns: https://blog.google/innovation-and-ai/technology/safety-secu...
The only real downside to this is that a 0kp cannot be reliably tied to an identity of the person using the device and thus tickets could be proxied/shared around with semi technical tools (and/or an ai agent tasked with creating a proxy). This really isn't solvable without device-level attestation[0], as if a website needs to reliably say "this person is actually this person" then it needs all pieces of data itself.
This could be solved by adding in a still privacy-preserving step like "The device is doing periodic face id scans and matching them to an identity, and constantly renews/re-presents to the age assurance consumer", but that has its own drawbacks[0].
0: Namely, lock in to devices that can do this, and that includes basically guaranteeing a double digit percentage of adult humans would not have access due to their device being old, unsupported, missing the hardware, etc. And with so many humans excluded, you would not have mass adoption. Probably also excludes rooted devices if we bring in attestation of unmodified software.
The unspoken part of this requirement is that websites would have to block users who aren’t connecting via one of these attested, verified, locked down devices.
There is the obvious loophole that using a VPN to a country without these requirements would circumvent it. That’s how kids are already circumventing age restrictions in places like Australia and it’s why the UK has taken an interest in attacking VPNs.
The alternative is what we're getting right now: laws that require verifying ID documents, often in ways that restrict even the notion of maintaining the user's privacy. Attestation might be an "OK" to "good" solution while this is between bad and really bad.
There is no form of digital ID that isn't evil, but anything requiring attestation is super evil.
Old hardware will have to be grandfathered. Old cars don't track us and that has created a market for old cars.
Hardware age attestation will be a long timeframe project. The current work should be towards standards that can get us there.
Finally, anonymity didn't exist for my grandparents. It won't exist for my grandchildren.
Your grandparents could walk to the next town over and give themselves a different name and nobody would ever know who they were. They could get a job, be paid in cash, and deposit that money in a bank account with no KYC. They could drop a letter in a public mailbox without a return address, or put up posters at night, or make phone calls from public telephones. Nobody would know who did it, and there would be no surveillance footage to review after the fact, no digital footprint to trace. They could write a letter to their local newspaper to be printed with a fake name, or publish a book or story or magazine under an assumed identity. There were no ALPRs, no automated facial recognition, no built-in vehicle telematics, no drones, no smartphones to track anyone’s movement, no doorbell cameras on every block, no video tapes, no serial numbers hidden in the printouts from copy machines, no DNA analysis, no databases instantly searchable with the click of a button.
Feel free to make a value judgement about whether what we have now is better or worse than the past, if you want, but don’t invent history to rationalise it. The internet did not invent anonymity. It used to be the default.
Unfortunately it's so much easier for lawmakers to slap down a law that says "you must verify IDs right now if you want to continue to exist" with no requirement, and often not even support for, privacy preserving ways to make this happen. The laws are happening now. The chance of reform to align with a privacy-preserving option once the laws are implemented is slim to none.
edit: sp
In letting things flow to easily the opposition is to have heavy lock down on information. A lot of the time, the opposite of one bad idea is another bad idea.
Is there, though? The push is coming from lobbyists who seem to be largely funded by wealthy elites, corporations, and other opaque organizations. One of them seems to be Meta. It doesn’t look like a grassroots effort.