smiletolerantly

joined 1 year ago

Fair, maybe remove the question altogether, and have dedicated GOV endpoints for specific attestations?

While that's true from a technical perspective...

How/where do you keep the certificate? If you either need an app for it, or need to manually install it on your device, most users would probably be out. The benefit of my suggestion is that you need absolutely nothing except a way to authenticate with GOV.

  1. is a Problem with all of these, that's for sure.

I fjnt get the part about the info service tbh

As long as your browser saves an auth token or something for GOV somewhere, all of that can happen without user interaction.

[–] smiletolerantly@awful.systems 7 points 3 weeks ago (4 children)

I think that at the bare minumum, the PORN<->GOV connection must not occur. How about this (simplified):

  • USER visits porn site
  • PORN site encrypts random nonce + "is this user 18?" with GOV pubkey
  • PORN forwards that to USER
  • USER forwards that to GOV, together with something authenticating themselves (need to have GOV account)
  • GOV knows user is requesting, but not what for
  • GOV checks: is user 18?, concats answer with random nonce from PORN, hashes that with known algo, signs the entire thing with its private signing key
  • GOV returns that to USER
  • USER forwards that to PORN
  • PORN is able to verify that whoever made the request to visit PORN is verified as older than 18 by singing key holder / GOV, by checking certificate chain, and gets freshness guarantee from random nonce
  • but PORN does not know anything about the user

There's probably glaring issues with this, this is just from the top of my head to solve the problem of "GOV should know nothing".

[–] smiletolerantly@awful.systems 1 points 3 weeks ago (3 children)

Not sure. How about this (simplified):

  • USER visits porn site
  • PORN site encrypts random nonce + "is this user 18?" with GOV pubkey
  • PORN forwards that to USER
  • USER forwards that to GOV, together with something authenticating themselves (need to have GOV account)
  • GOV knows user is requesting, but not what for
  • GOV checks: is user 18?, concats answer with random nonce from PORN, hashes that with known algo, signs the entire thing with its private signing key
  • GOV returns that to USER
  • USER forwards that to PORN
  • PORN is able to verify that whoever made the request to visit PORN is verified as older than 18 by singing key holder / GOV, by checking certificate chain, and gets freshness guarantee from random nonce
  • but PORN does not know anything about the user

There's probably glaring issues with this, this is just from the top of my head to solve the problem of "GOV should know nothing".

[–] smiletolerantly@awful.systems 15 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

Is it just me or has the number of lunatics on Lemmy really spiked in the past week? I mean, look at this guy... Or have we "finally" been discovered by the disinformation bots?

A Short Stay In Hell

Short novella based on this exact premise. If you have never encountered it before, I urge you to give it a read. It's excellent. Also very disturbing.

[–] smiletolerantly@awful.systems 11 points 3 weeks ago (1 children)

Got a simple brother laser printer. Duplex, BW only, works flawlessly with Linux and as a network printer.

4-5 times a year I'll need to print 10 pages. Add an additional one every two weeks.

The printer definitely paid for itself in convenience.

[–] smiletolerantly@awful.systems 10 points 3 weeks ago

I mean, yea. But it is also easy to buy them, they're everywhere and fairly cheap. The Galbani one is also just 1€ or so more expensive.

To be clear, making your own is fantastic, it's just not anything I'd want to do 2x/week

[–] smiletolerantly@awful.systems 15 points 3 weeks ago (4 children)

Mozzarella (talking about the balls of fresh mozzarella you get sealed in with their brine).

Can't do store brand anymore after having tried Galbani.

[–] smiletolerantly@awful.systems 3 points 3 weeks ago (1 children)

Ugh yeah, it feels like the show is making fun of Preservation, which kinda undermines the show. Contrary to what others seem to think here, in my opinion the added goofiness really detracts a lot from the show.

[–] smiletolerantly@awful.systems 18 points 3 weeks ago (2 children)

Imagine reading this headline and instantly jumping to this in your head.

view more: ‹ prev next ›