Skip to main content

POST Web regulation the UK way, part 97: age verification

Next month, a year behind schedule, the UK Government’s new online age verification (AV) law comes into effect. The Department for Culture, Media and Sport (DCMS), the section of the British government “in charge” of the web decided to stop children from watching porn online (which I’m sure we would all agree with) by bringing in the new law. It excludes websites on which less than a third of content is pornographic material and where it is provided free of charge. So web sites that have more than one-third pornographic content (I know, I know, it depends on what you mean by one-third and it depends what you mean by pornographic and it won’t make the slightest difference, but whatever) will have to implement age verification. 

But how?

When this legislation was originally introduced, OFCOM put forward the idea of using credit cards or the electoral register, both of which are bad ideas and certain to lead to disaster. Hence I was surprised to see in the The Daily Mail, that one of the "suggested methods" to verify the age of viewers is to require browsers to input bank card details to all pornographic websites they visit.

Suggested by whom, I wondered? It could not be anyone who knows how anything actually works, which made me suspect it must have come from someone in government. A bit of ducking* and the BBC indeed confirms that “ministers have suggested” this idiotic, backward-looking, anti-competitive and life-threatening approach to the problem.

It is idiotic because making people provide personal details in order to access web sites could lead to their data being compromised and there is an extreme risk of privacy loss for any person using the service.

It is backward-looking because it bends a fifty year old technology to a purpose it was never designed for. Indeed, the idea that people have one identity is fundamentally outdated.

It is anti-competitive because it is inevitable that the AgeID system offered by Mindgeek (who own the biggest porn sites) will come to dominate. Hence Mindgeek will know who is watching what porn even when it is not on their own sites.

It is life-threatening because, as I have pointed out before, when the adult sites get hacked, as they inevitably will be, the personal details of the customers will be available to all. And, as actually happened in the case of the Ashley Madison hack, people will die. It’s not funny.

The introduction of age verification for adult services should have been the perfect opportunity to create a national infrastructure for digital identity designed for the future rather than the past. In a sane world, the government, the banks, the mobile operators, the service provider and big retailers would be working together to develop a secure and privacy-enhancing platform based on cryptography and connectivity. Instead, as I see on Sky News, “thanks to its ill-conceived porn block, the government has quietly blundered into the creation of a digital passport - then outsourced its development to private firms”.

The parasitic vitality that adult services offer to digital identity is too good to waste, but it looks as if the UK is going to waste it.

*I use DuckDuckGo for searching.

Comments

Popular posts from this blog

new survey results from USA Technologies (USAT) suggest. The payments technology company, which enables electronic payments for self-service machines, compared consumer spending activity at 35 of its vending machines in urban areas with a high concentration of iPhone users between week one and week four of the installation of new digital signage promoting Apple Pay. Consumers made more contactless purchases: The vending machine providers saw an average contactless transaction revenue increase of 89%, implying that consumers are making more mobile payments. This was likely driven by the clear advertisement of Apple Pay. Total transactions increased: Consumers made more purchases overall. This was probably driven by an uptick in mobile payments, given the major increase in contactless transaction revenue. And the vending machines may have attracted many first-time users who were drawn in by the digital advertising of Apple Pay. Boosting awareness is key to unlocking pent-up demand amon...

David | LinkedIn

Alex Todd rather kindly called this a “most lucid explanation of digital identity management” I would highly recommend this presentation to anyone interested in understanding prospective blockchain based identity architectures From David | LinkedIn This is very kind, but as I said in the link, this is thinking out loud and far from a fully-developed solution. We’re working on parts of this for different clients and I can see that there is something there - a genuinely new way of solving some old problems - but it’s early days.

Financial Cryptography: Corda Day - a new force

Forum friend Ian Grigg, who I always take very seriously indeed on any such topic, wrote about Corda on his blog and concluded with a powerful statement. Bitcoin told the users it wanted an unstoppable currency - sure, works for a small group but not for the mass market. Ethereum told their users they need an unstoppable machine - which worked how spectacularly with the DAO? Not. What. We. Wanted. Corda is the only game in town because it's the only one that asked the users. It's that simple. From Financial Cryptography: Corda Day - a new force xxx It seems to me, however, what Ian is pointing to as the greatest strength of their approach is also the greatest weakness. A staple feature of unimaginative management consultants presentations about innovation is some variation on the statement by Henry Ford that if you had asked users what they wanted, they would have asked for faster horses coupled with some variation on the statement by Steve jobs that it was pointless ask...