this post was submitted on 24 Oct 2024
630 points (98.9% liked)

Technology

58866 readers
3714 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] RampantParanoia2365@lemmy.world 20 points 16 hours ago (1 children)

Huh? So...only children get to use social media...?

[–] Jyek@sh.itjust.works 3 points 8 hours ago (1 children)

Every finite range has 2 limits. A bottom limit and a top limit.

[–] ripcord@lemmy.world 1 points 5 hours ago

This isn't a finite range.

[–] Etterra@lemmy.world 28 points 19 hours ago (3 children)

Enforcing it is virtually impossible.

[–] TriflingToad@lemmy.world 3 points 5 hours ago

+1, where I live they made phones during school hours illegal. Literally NOTHING changed it's just that if they want to they can get people in trouble.

[–] MoonlightFox@lemmy.world 24 points 17 hours ago (3 children)

You are correct, but i'd like to expand a bit on how it could be solved.

It requires that all major social networks use BankID for all traffic from Norway.

Bypassing it would require a VPN, which is a simple hurdle.

But the major win here is that parents will enforce this. Parents can point to this law and say that they have to be old enough. As long as enough parents enforce this law and the VPN requirement is there, then it will probably be effective enough

[–] GenXLiberal@lemmy.world 9 points 14 hours ago

I’m not Norwegian or in Norway and I’m definitely doing this - my kids know of the problems of social networking (including the latest TikTok court docs and what the execs say.)

Some friends say that’s over the top; I just say it is responsible, involved parenting. I value their mental health.

[–] 01189998819991197253@infosec.pub 10 points 16 hours ago (1 children)

So you need a BankID to open an account on the covered platforms? That seems like a privacy nightmare.

[–] MoonlightFox@lemmy.world 4 points 15 hours ago (3 children)

Everyone in Norway has one, well like 99,99% or something. It is a requirement for banking.

It is used for all banking services in Norway. When you get your own bank account at 13 or something you also get BankID.

[–] sibachian@lemmy.ml 2 points 9 hours ago (1 children)

it's a privacy nightmare as it relies on google and apple servers to authenticate verification. neither of which are private. it also makes it impossible for european alternative operative systems to enter the market - giving a foreign state, the US, full control over what we can and can't do.

[–] MoonlightFox@lemmy.world 3 points 9 hours ago (1 children)

Can you elaborate a bit on the google and apple servers for authentication? My impression was that this system uses its own platform.

[–] virku@lemmy.world 1 points 5 hours ago (1 children)

BankID is it's own trusted platform. It is not connected to any of them. I am not sure if I understand what the other person is trying to say. Maybe they are afraid that Google and Apple can use BankID verified sessions to better identify the user?

[–] Lifter@discuss.tchncs.de 1 points 5 hours ago (1 children)

They are using the phone SDKs to verify that BankID was correctly installed, much like any other client side DRM.

[–] virku@lemmy.world 1 points 4 hours ago* (last edited 4 hours ago)

I don't think BankID has any sort of SDK that lets other apps access user data like that? All interaction with BankID I know of at least is triggered with the app needing authentication/signature opening a BankID session to the central service where you enter your authentication and then the BankID app is used as MFA to verify this.

Or am I misunderstanding what you are saying completely?

[–] boonhet@lemm.ee 4 points 14 hours ago

We have SmartID and MobiilID in Estonia too, but you don't need it to log onto social media. You only need it

[–] 01189998819991197253@infosec.pub 3 points 14 hours ago (1 children)

Right. But Facebook shouldn't have that number.

[–] Leavingoldhabits@lemmy.world 9 points 12 hours ago (2 children)

As far as I understand, BankID actually abstracts away those numbers. FB have to use an API, and more or less receive a true or false on their query.

They recently opened up for using BankID to prove your age at bars and such, and I think they only get to know if person is old enough or not. Not even a number, just old enough.

If truly masked, it might be fine. But the site has to gather that data in order to append it to the API call and it, therefore, mean that they could keep it (even of they actually may not). There are ways around it, such as with session tokens passed between the social media's page and the bank's official API page. But, knowing fb, they won't use the latter.

[–] Hacksaw@lemmy.ca 3 points 10 hours ago (1 children)

This is the right way to protect privacy. Auditable government departments have your data anyways. They don't provide the data to companies, but they answer questions like "old enough to drink?" With yes no answers.

[–] funkless_eck@sh.itjust.works 8 points 17 hours ago

And a 14 year old kid using a VPN is probably not the target audience for a lot of the worst abuse.

Not saying it won't happen, but a drastic reduction is better than none.

load more comments (1 replies)
[–] Urist@lemmy.ml 84 points 1 day ago (5 children)

For all those that think this is the government overstepping with an unenforceable law, you are not grasping the intent correctly. Declaring that we have democratically decided to have an age limit for social media means that we have laid the groundwork for collective action. This means that suddenly schools, parents, teenagers themselves, etc. all have a reason and a mandate for keeping young people off platforms that we believe to be detrimental to their development and well-being. True democratic culture lies not in bourgeoisie domination (as many Americans like to believe), but rather in mutual trust and cooperation in order to solve common and big problems.

[–] Zink@programming.dev 4 points 10 hours ago

True democratic culture lies not in bourgeoisie domination (as many Americans like to believe), but rather in mutual trust and cooperation in order to solve common and big problems.

American here who has visited Scandinavia a couple times.

There are so many little differences, but they add up to a staggering divide in the amount of mutual trust and cooperation you see in little everyday interactions.

[–] erlend_sh@lemmy.world 28 points 21 hours ago (2 children)

Exactly!

It’s not about Totalizing Enforcement. What it changes is the cultural norm. Not right away but over time.

An age limit on alcohol never stopped anyone of any age to acquire alcohol, but it sets the societal bar for what’s acceptable. You don’t wanna be the parents that gave your kids alcoholic beverages at 13.

It’s always a little jarring how everyone very readily believes that the Scandinavian countries are the happiest in the world, but won’t believe that the incremental policy changes we implement here have any effect 🤷‍♂️

[–] sugar_in_your_tea@sh.itjust.works 4 points 14 hours ago (1 children)

An age limit on alcohol

This has a very clear means of enforcement, since you can require age checks at the point of purchase and revoke licenses if someone violates that.

This law is a lot harder to enforce, because what exactly is "social media"? If the kids are all blocked from Facebook and whatnot, they could rally around the comments section of a local newspaper or something (or even something like Lemmy, which isn't large enough to properly regulate). Kids are creative, and a lot of parents (at least here) are pretty oblivious to what they actually do on their devices.

So I'm skeptical of this law, but we'll see how it plays out.

[–] lightsblinken@lemmy.world 3 points 8 hours ago (1 children)

its the point where people say "but a sneaky vpn will get around so we may as well do nothing" is equivalent to "my friend can buy me a sneaky drink so we may as well do nothing"... just because you can exploit a law doesn't make it invalid. enforcement concerns are valid, but it seems reasonable to start with "i agree there is a problem" and go for the 80% rule

[–] sugar_in_your_tea@sh.itjust.works 2 points 7 hours ago* (last edited 7 hours ago) (1 children)

That really depends on what the proposed solution looks like. My government implemented a similar law (included porn as well as social media), and the net result is that I either need to upload my government ID or use a VPN to access the site. I don't trust these sites w/ my government ID, so I use a VPN. A lot of sites just don't support my area, so even if I'm old enough, I can't access the website. They're more willing to take the loss than implement some kind of ID vetting.

When my kids want to sign up for social media accounts (and I'm okay with that), I'll teach them how to use a VPN to get around the law so neither they nor I have to upload our IDs, and they'll probably teach their friends and whatnot.

That said, if age verification checks were simplified to a debit/credit card payment authorization (and not even an actual payment), then you'd automatically prove that they're old enough to have access to a debit/credit card, no government ID needed. The bank will check your ID, and if you're a minor, the parent will have to approve the account. That would be acceptable to me, because maintains the bar for most kids, while still having a reasonable way for a parent to provide access without doxxing either of them (except the name printed on the card, that is).

That's why I'm skeptical, but willing to see how it plays out. My local law certainly ticked me off though.

[–] virku@lemmy.world 1 points 5 hours ago* (last edited 5 hours ago)

Most kids here in Norway get a bank account with debet card and BankID with it at 13. Implementing a solution to use it to verify if you are older than X years old would actually be less work than your proposed solution, both for the social media site, banks, the kids and the parents.

load more comments (1 replies)
load more comments (3 replies)
[–] hogmomma@lemmy.world 7 points 17 hours ago (2 children)

Don't stop at social media. Put that same limit on religion, too.

[–] Emerald@lemmy.world 5 points 14 hours ago (3 children)

Are you pointing out how you don't like this law or are you actually suggesting we ban religion for kids?

[–] hogmomma@lemmy.world 5 points 7 hours ago

I'm gonna go with what home dude below said. "People should be of legal age before officially joining a religion."

[–] lepinkainen@lemmy.world 12 points 13 hours ago (1 children)

People should be of legal age before officially joining a religion.

[–] grrgyle@slrpnk.net 2 points 8 hours ago
[–] FlyingSquid@lemmy.world 5 points 13 hours ago

I'm thinking neither one is really enforceable.

[–] BruceTwarzen@lemm.ee 5 points 15 hours ago (1 children)

It's norway, so that's kinda pointless

load more comments (1 replies)
load more comments
view more: next ›