mindlessflight: (Geist)
mindlessflight ([personal profile] mindlessflight) wrote in [community profile] anonrerising2021-10-15 09:06 am

BINGO

Since this post will be current until January, thought I'd be salty/have fun with it. Let's see if we get Bingo, shall we?


Positivity Post
No Dumb Questions Post

Wanker Thread
OT Thread


Flatview
Latest Page
Report a Thread
Rules

Re: Dakkokki

(Anonymous) 2022-01-15 01:57 am (UTC)(link)
This whole thing's a mess, but I think it's even funnier how Dakkokki is just digging their heels in and not proposing alternate methods. Welcome to the AR thread, Dakkokki. You really want those ID's, huh?

Re: Dakkokki

(Anonymous) 2022-01-15 01:59 am (UTC)(link)
I’ll say it again, I’m open to other ideas and methods that will securely verify someone’s age, not just have them click a button like “yup I’m 18 just believe me bro”

Re: Dakkokki

(Anonymous) 2022-01-15 02:02 am (UTC)(link)
Then just say that? Just drop the ID notion, admit it's a bad idea?

This whole thing is because you had an awful idea for verification. I agree that "yup I'm just 18" is a weak defense against minors, but there's basically nothing you can do. Collecting personal identifiers as a random discord mod is the worst alternative.

Re: Dakkokki

(Anonymous) 2022-01-15 02:03 am (UTC)(link)
it is funny and also interesting that you start ignoring posts that continue to point out problems and also more accurate things about what you're doing. is it because you don't have a good response that isn't copying pasting the same thing over and over again? :( i remember you did this when you thought that your cross site trades were not against the rules too.

Re: Dakkokki

(Anonymous) 2022-01-15 02:04 am (UTC)(link)
And people are trying to explain to you that there aren't currently safe, secure methods of doing that, and that it's a general internet problem, not one that's your personal responsibility to solve.

Flight Rising is legally required to keep children under 13 from using its service. Do you know how the site does that? By asking them to declare they're over 13. Anyone who's proven to be under 13 is banned, but there isn't verification.

I feel like you're saying the concern among your users is that minors will trick them, which is also kinda worrying to me, in that this becomes not about protecting the underage, but providing a sense of security theatre.

Re: Dakkokki

(Anonymous) 2022-01-15 07:49 am (UTC)(link)
Network security admin here. Do you have any idea how often I have to repeat to people on a **daily** basis, let alone have it as my signature for when people email me because it should be common sense but isn't, "do not give out your information freely online, for any reason" because some dude like you is so terminally online that they feel it's A-OK to just give/ask for details and could jeopardize not only THEIR safety, but the safety of others at large?

Your heart is in the right place because kids shouldn't be in those spaces, but I hate to fucking say it, there's no solution to safely and securely get that sort of private data - even temporarily - that isn't expensive and unreasonable for just one person and your mod team. You clearly do not have the security savvy or bankroll to handle that information. If big companies with infrastructure and netsec staff literally paid around the clock to monitor their systems for breaches and improve on it constantly to make sure that they're as secure as possible when new breaches are invented aren't immune to getting ripped open like waterlogged tissues, what makes you think you and your DMs are safe on discord- a service with admins that literally REFUSE to handle its security and phishing problems in favour of wanting to push for JPEGs that have the value of whatever it feels like that day?

On top of that, do you understand how laughably easy it is to just photoshop an ID? I'm hearing here and there 'maybe you can just blur everything out except the DOB', but listen to me for a second- it's *still* not secure enough and at that point why ask for verification at all. You get internet sleuths all over the place who can perfectly hunt down a person's exact geolocation based off of seemingly inane geographical features like a bush trimmed a certain way. Images have metadata which can tell you a LOT about when, where (using your device's possible GPS or network tracking), and what devices created an image. That innocent little photo of an ID just became a LAND MINE that could hurt people infinitely more than help. You could hurt innocent people way more by doing this, and it's laughably easy to scrape for that metadata what with all the guides out there on how to do it on google.

By publicly asking for these images of photo IDs, you are painting a target on your account if someone's really fiending for that info. And hell, you could just get fucked up by a

Look. It fucking sucks, but there is no safe way for you - an individual - to ask for this information that might not even be real. You could even require a video chat of the person holding their ID and their discord tag and you're still accepting people on a 'trust me i'm an adult bro' basis because fake IDs are a rebellious underage drinker's best friend in real life. Unless you're physically holding that ID and can check it for all those security measures, it doesn't account for jack fuck.

You're just going to have to trust that whatever fucker clicks that button is a legitimate adult, and that everyone who doesn't click it has parents who care enough to teach their kid online integrity and monitor their activity online.

Re: Dakkokki

(Anonymous) 2022-01-15 07:57 am (UTC)(link)
SA, apparently my brain fucked off somewhere because I can't TL;DR for my life and I skipped finishing a sentence, but you deserve to get your mindset fisted with a wall of text the size of the Burj Dubai right into the cerebrum if it means you and maybe others who think like you take security much more seriously.

*And hell, you could just get fucked up by an accidental slip of judgement and that data gets stolen on a whim.

Re: Dakkokki

(Anonymous) 2022-01-15 04:30 pm (UTC)(link)
*late to the party* dude, that's literally enough - you are not the police and that's enough age verification as expected from a random citizen of any country. If you want "securely verify", then shell out the dosh for https and secure coding.