The article says that is the intended use, I agree this is just bad implementation, but it’s bad because it not only allows control one way, from the app to the browser, it also allows it the other way: browser extensions with an ID that matches one of the allowed ones can access userspace, without asking. That is a huge attack surface that is installed without any consent.
Well, don’t be. It’s fake. Please return to your previous level of anxiety.
This is an AI slop repo. Somebody is paying money to anthropic to harass volunteer open source developers. Pretty gross honestly, let’s keep our outrage aimed at microslop and co, and the legislators behind them.
If you want a real answer, it is for the situation where the owner of a device would like to respond on a non-privileged user’s behalf. A kid being asked ‘hey, you have to be 18 to see inside, pinky promise? ;)’ by a website is not secure. And there are plenty of sketchy, privacy-invasive third party solutions to lock down devices, but a system-level universal age attestation api would make it a lot easier for parents to control what their child sees, assuming the internet adopts it broadly.
It’s not meant to even inconvenience adults who own their own devices. People complaining about this must have trouble opening child seals on their medicine.
I would be opposed to that hypothetical proposal. This real proposal, helpfully linked, has none of that. It’s the same way how I’m in favor of energy independence but oppose fracking. How I’m in favor of legalization and hate the idea of phillip-morris joints. Just because two policies have a vaguely similar idea of ‘protecting children’ doesn’t mean they are equal.
Nobody is pretending, we just know how to read. There are real threats to privacy, there are real age verification bills going around everywhere. This isn’t one of them. Technical details matter, and this proposal preserves children’s privacy while giving parents more control of their devices.
The correct word is attestation, not verification. It’s an incredibly important distinction.
There’s no bypassing required, there’s literally no verification required. The post title is incorrect.
In the hypothetical world where an operating system, independent of any legal requirements, decides to require age/id verification, I will simply not use that particular operating system.
The law only applies to OS providers. I, as a user, can legally input 1675 as my birth date.
I can ‘indicate’ whatever the fuck I want with no consequences. That’s not the same as age/id verification.
I don’t see anything in here about verification.
I guess you can just restore things, this is news to me, but pretty neat.
It’s a scary world out there, I absolutely understand the feeling of reading too far in to a slop piece and feeling like my time was stolen from me. We have to support good human content, even if it’s from some hedge fund think tank thing. Thank you for being honest, sorry for calling it bullshit. It was bullshit, but, like I’m sorry.
deleted by creator
As a Guix user, I recommend Ubuntu. If you stick with it, there are specific distros for gaming, but, Ubuntu has such a large user base it makes it very easy to get answers to questions that are specific to your distro. Ubuntu makes it easy to install nvidia and other ‘3rd party drivers’, it’ll just work. I do recommend installing software in the terminal, the Ubuntu app store I feel has some rough edges.
Well, the alternative ROM scene has been active as long as Android has, so I kinda doubt Google hasn’t thought about whether their software is actually soft and squishy like the name implies, and easy to remove or modify.
I think you might be right, but it’s a little silly to think Google would only install spyware on a tiny fraction of their phones that they somehow had a premonition that GrapheneOS would be installed on.
The user base of Pixel phones is small? What?
This is terrible advice, even if I assume you are also using a key-file on a removable usb. An attacker can brute force decrypt your db. There is no rate limiting when you literally have the database file, they could replicate it across thousands of servers each with dozens of cores, each core trying a dozen keyphrases per second. That’s assuming a motivated attacker like a government or crypto scammers, but why open yourself to that possibility?
He’s not a bystander though, he is encouraging racist ideas and thoughts. I see spreading hate as a bad thing, and the fact that Alex Jones or this guy got rich off it makes me actually more angry, not impressed by his hustle.