Today - 25 July - is the deadline for user-to-user services subject to the UK's Online Safety Act to have "highly effective age assurance" in place for UK users, if the site's content requires it. (Not all sites/content require age assurance.)

Please be careful, especially if you are in the UK.

Think before handing over ID documents, and be especially mindful of mistyped URLs and other scams, trying to obtain your personal data for phishing or blackmail purposes.

#OnlineSafetyAct

@neil A tech journalist that I have a lot is respect for, @acedtect, has always been an advocate for Tim Berners Lee's Solid as a means of identification that allows the citizen retain a modicum of control. I wish the UK government had taken this opportunity to push it.

https://en.m.wikipedia.org/wiki/Solid_(web_decentralization_project)

@neil A discussion came up today in the work chat, if I use a false ID (e.g. AI generated image) to bypass this check to allow me to access a service which I am old enough to access anyway, would I commit an offence under the identity documents act 2010 or the fraud act 2006?

Would even testing this lead be in a postion where I could be prosecuted (like testing for vulnerabilities under the CMA)?

How is this different from me using a fake date of birth on sites?

Do we all just need to wait for an actual judgement or will the age verification vendors actual care?

@neil Im concerned how this will affect decentralised social media like #simplexhttps://simplex.chat #briarhttps://briarproject.org & #cwtchhttps://docs.cwtch.im these services r so decentralised there aren't even servers that facilitate users directly its more like a participatory network infrastructure, its undeniably user-to-user but what are they going to do charge every simplex relay operator? Or every node in a briar mesh? Or r group moderators liable instead?
@krans @neil I think it’s impossible. Either you protect user privacy adequately and build a client side solution (which implicitly trusts the client and is therefore spoofable and able to be bypassed). Or you build a server-side solution where the user has to blindly submit images and believe your promises about how they are processed.

We’re in this situation because hapless, lazy MPs believed techbro promises that they can solve this intractable societal problem (for money). No amount of code can fix this. This isn’t a computer problem. This is a society and people problem.