frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

So, You've Hit an Age Gate. What Now?

https://www.eff.org/deeplinks/2026/01/so-youve-hit-age-gate-what-now
124•hn_acker•1h ago

Comments

JoshTriplett•1h ago
I'm surprised that the EFF does not highlight the best option, here: use a VPN to a jurisdiction that doesn't have such ridiculous laws.
kristjank•1h ago
It might be bad for an activist group to advocate just ignoring the problem into a different jurisdiction.
paulddraper•1h ago
They could sell it as "if your IP geolocation is inaccurate, or if the statute does not apply to you."

But FWIW VPNs can get flagged for suspicious behavior. YMMV

Retr0id•1h ago
In many cases, using a VPN is a great way to get your account flagged as suspicious.
SoftTalker•1h ago
Next step: the same government that is demanding the age verification will ban VPNs.
pc86•43m ago
Everyone seems to forget that using VPNs to violate your local laws gives lots of good ammo to the authoritarians that want to ban VPNs. The answer isn't to use a VPN to get around it (and thus give fodder to your enemies) but to change the law.
luke727•20m ago
While I agree with this in spirit, here in the UK both major parties along with the public at large generally support these types of laws.
JoshTriplett•27m ago
Not especially feasible if you want to support businesses. More likely is trying to demand that VPNs also enforce age verification, which business-targeted VPNs might do, and then ban the ones that don't.
cedws•57m ago
The days are numbered on this technique working. After enough countries enact their own age verification laws tech companies will just make that the global default policy, and I'm sure the opportunity to harvest user data will not be left to waste. Many sites already block and throttle VPNs.

When that day comes I'll stop casually using the internet or search for the underground alternative.

omoikane•40m ago
I think EFF does not recommend for or against VPN in general because it's not always a clear win, depending on the VPN and the use case.

https://ssd.eff.org/module/choosing-vpn-thats-right-you

hamdingers•30m ago
"Give up" is not the best option. Certainly not from the EFF's perspective.
marssaxman•1h ago
I have never clicked "accept" on a cookie banner, as a matter of principle; I zap them away with uBlock Origin. Should the plague of age verification reach my jurisdiction, I'm sure I will handle it in like fashion.
antonvs•1h ago
The difference is that the cookie banner is not a gate. uBlock Origin is unlikely to be able to satisfy a website about your age without submitting the info that the site expects. (Assuming the age check has any teeth at all.) You're unlikely to be able to continue as usual if these kinds of measures become ubiquitous.
RankingMember•58m ago
Zapping only works if the site lets you continue/pull content without verification.
marssaxman•55m ago
I expect I'll need to employ some other technical means of circumvention, but the principle of refusing to engage with the thing on its own terms will remain the same.
kube-system•47m ago
These things are integrated into the authentication systems of these services. They aren't implemented client side. Refusing to engage with them means you cannot use the service.
goopypoop•45m ago
ignoring the banner is the same as agreeing to all the opt-out "legitimate interest" shit
jimbob45•1h ago
Is there a throwaway identity that people are using? A dead person unchecked in Mississippi somewhere? Like every teen in America using the same identity like everyone's extended family does with their uncle's Netflix account?

I don't want to google it because I don't want to be put on a list but I also feel somewhat confident that this is being done. Apparently, HN feels safe to ask questions like that for me.

bee_rider•1h ago
That’s an interesting question.

Actually, a follow up. PII leaks are so common, I guess there must be millions of identities out there up for grabs. This makes me wonder: we’ve got various jurisdictions where sites are legally required to verify the age of users. And everybody (including the people running these sites) knows that tons of identities are out there on the internet waiting to be used.

How does a site do due diligence in this context? I guess just asking for a scan of somebody’s easily fabricated ID shouldn’t be sufficient legal cover…

kube-system•32m ago
These ID laws typically require a solution to be "commercially practical" or similar. The standard is not "impenetrable and impossible to circumvent"

That's why some of them don't even ask for ID but just guess the age based on appearance. That's good enough per the law, usually.

everyday7732•58m ago
It would probably flag that multiple people are using the same photo or same persons name/ id, but I expect you could get away with doing using someone known to you. iirc the reason people are using game screenshots is because it's not going to match any image that the recogniser has seen before. Use tor for the things you don't want to google and have associated with you.
shiandow•53m ago
Last time I tried I could find a photo ID just with a basic image search. It is an unavoidable consequence of teaching people that scanning an ID is not utterly insane.

Ironically there was no way to report the image anonymously to the service hosting it.

acka•52m ago
Netflix has been checking accounts against public IP addresses and local networks for ages, at least in The Netherlands. if I use my Dad's account, I get flagged as being "not on the same home network" immediately. I think that using a VPN and Netflix detecting that would only make matters worse, like termination of service.
reincarnate0x14•28m ago
I gave up on netflix years ago for unrelated reasons but never had any sort of issue both VPNing between various countries and traveling between them. My wife would pretty regularly want to watch netflix as if she was in Japan or the UK and so we'd turn a VPN on for the TV network and their own TV app never complained at all that it was suddenly on a different continent.
glitcher•37m ago
> I don't want to google it because I don't want to be put on a list

Of all the controversial things out there we've become afraid to even google in order to learn more about the world around us, this one strikes me as not all that controversial.

But you're not wrong, just making a comment about how sad the world has become.

cons0le•1h ago
>If Google can guess your age, you may never even see an age verification screen. Your Google account is typically connected to your YouTube account, so if (like mine) your YouTube account is old enough to vote, you may not need to verify your Google account at all.

This has been proven false a bunch of times, at least if the 1000s of people complaining online about it are to be believed. My google account is definitely old enough to vote, but I get the verification popup all the time on YouTube.

I think the truth is, they just want your face. The financial incentive is to get as much data as possible so they can hand it to 3rd parties. I don't believe for a second that these social networks aren't selling both the data and the meta data.

AshamedCaptain•1h ago
My Google account is more than 18 years old and I hit an age prompt when I was trying to watch some FPGA video (out of all things). So no, account age is not necessarily a factor.
dlcarrier•1h ago
Field programmable gatorade is an adult-only beverage.
raverbashing•59m ago
Yeah, they could/*should* infer your age just by the fact you're watching an FPGA video
stonemetal12•44m ago
They probably need to account for parents allowing kids to use their account, so account age can be a factor but not an automatic pass.
RobotToaster•35m ago
Can't allow any underage synthesis.
inopinatus•25m ago
That makes sense. Golf has a minimum age of 35.
shevy-java•56m ago
> I think the truth is, they just want your face.

Agreed. They treat people as data points and cash cows. This is also one reason why I think Google needs to be disbanded completely. And the laws need to be returned back to The People; right now Trump is just the ultimate Mr. Corporation guy ever. Lo and behold, ICE reminds us of a certain merc-like group in a world war (and remember what Mussolini said about fascism: "Fascism should more appropriately be called Corporatism because it is a merger of state and corporate power." - of course in italian, but I don't know the italian sentence, only the english translation)

jama211•54m ago
They definitely already have your face though…
zahlman•52m ago
From where? Not everyone even puts selfies on the Internet.
ambicapter•49m ago
The more examples in various situations they can get, the higher their accuracy.
blacksmith_tb•54m ago
I agree they want the face data, but I think it's less clear they want to "hand it" (presumably that's really "sell it"?) to third parties. My sense is Google and Apple and Meta are amassing data for their own uses, but I haven't gotten the impression they're very interested in sharing it?
testing22321•52m ago
They’ll do whatever makes money.

Sell it and use it internally.

121789•46m ago
you are correct. having that data is one of their competitive advantages, it makes no sense to sell it. they will collect as much as possible and monetize it through better ads, but they don't sell it
llbbdd•45m ago
Sharing it is bad for business; selling insights derived from it for ad placement is the game. Faces definitely contain some useful information for that purpose.
zahlman•53m ago
I haven't gotten it yet on my account from 2006. Maybe it matters whether it's a brand account? Maybe it matters whether the accounts actually are connected?
mythrwy•27m ago
well as long as it's you logging in, they know you are minimum 20 years old!
SilasX•42m ago
I wrote an April Fool's parody in 2021 that Google is going to get rid of authentication because they're following you around enough to know who you are anyway (modeling it after their No Captcha announcement[1]):

http://blog.tyrannyofthemouse.com/2021/04/leaked-google-init...

Edit:

>I think the truth is, they just want your face.

I just realized the parody also predicted that part (emphasis added):

>>In cases where our tracking cookies and other behavioral metrics can't confidently predict who someone is, we will prompt the user for additional information, increasing the number of security checkpoints to confirm who the user really is. For example, you might need to turn on your webcam or upload your operating system's recent logs to give a fuller picture.

[1] https://security.googleblog.com/2014/12/are-you-robot-introd...

gosub100•19m ago
I just got glasses yesterday and the optician needed to take a pic of my face to "make sure my glasses fit". The first thing I thought of was they are probably selling the data.
irusensei•1h ago
Face scan: download and install Gary's mod.
Retr0id•1h ago
There were some amusing headlines a while back about Discord's verification being fooled with game screenshots. Does anyone know if that's still the case?
everyday7732•1h ago
saw a recent screenshot of someone doing it yesterday, so I think it still is a thing.
dlcarrier•1h ago
How well does the selfie test detect AI-generated photos? That seems easy to bypass, especially if you copy the metadata over from a real photo.
kube-system•43m ago
The ones I have used do not accept photos, they require real-time video with the front-facing camera and they prompt you to move your head to face different directions on command. Not impossible to attack, I'm certain, but it's tougher than simply uploading a photo.
shevy-java•58m ago
States need to stop sniffing for age really. This is age discrimination.
kube-system•37m ago
Basically every government on the planet has laws that apply specifically to children. The term "age discrimination" typically refers to disadvantaging someone for being of old age.
torcete•56m ago
I thought the article was about finding a job when you reach a certain age, which is my problem.
ryandrake•54m ago
My kid has recently just quit playing Roblox because of the sketchy facial age check process. She said that her and all her friends know not to ever upload a picture of themselves to the Internet (good job, fellow Other Parents!!) so they're either moving on to other games or just downloading stock photos of people from the internet and uploading those (which apparently works).

What a total joke. These companies need to stop normalizing the sharing of personal private photos. It's literally the opposite direction from good Internet hygiene, especially for kids!

kevmo•40m ago
I was getting a haircut last week and chatting about our kids with the stylist, who said (basically): "I just started letting my 7 year old on Roblox. I know its full of pedophiles. I told him to come to me or his older brother if anyone tries to talk to him."

If the million reports of Mark Zuckerberg enabling pedophiles and scam artists haven't made it clear, the executives of these tech companies just don't care. They will sell children into sexual slavery if it improves next quarter's numbers.

turblety•35m ago
There seems to be a big movement (UK specifically) from governments using age gateing as an excuse to increase surveillance and online tracking. I don't know where Roblox is based or it's policies, but it's likely they are just implementing what the government has forced them to do.

We need to push back against governments that try and restrict the freedom of the internet and educate them on better regulations. Why can sites not dictate the content they provide, then let device providers provide optional parental controls.

Governments forcing companies to upload your passport/ID, upload pictures/videos of your face, is dangerous and we are going to see a huge increase of fraud and privacy breaches, all while reducing our freedoms and rights online.

btown•28m ago
One aspect of this normalization of photo uploading is that, if a platform allows user-generated content that can splash a modal to kids, a bad actor can do things like say “you need to re-verify or you’ll lose all your in-game currency, go here” and then collect photo identification without even needing to compromise identity verification providers!

I truly fear the harm that will be done before legislators realize what they’ve created. One only hopes that this prevents the EU and US from doing something similar.

pfraze•19m ago
I’m sorry to say that a number of US states have instituted age verification laws over the past year
next_xibalba•10m ago
I generally agree, but I also think that free access to hardcore pornography is disastrous for minors and this seems like it might prevent that (if better implemented, can’t believe stock photos work).
polski-g•8m ago
What evidence led you to believe this, when controlling for heritability?
gjsman-1000•5m ago
How about that 38% of young women in the UK have experienced asphyxiation; combined with studies showing there is zero safe threshold without brain damage markers in the blood?

https://www.bbc.com/news/articles/c62zwy0nex0o

https://www.theguardian.com/society/2025/nov/18/sexually-act...

https://wecantconsenttothis.uk/blog/2020/12/21/the-horrifyin...

https://www.nytimes.com/2024/04/12/opinion/choking-teen-sex-...

https://www.psychologytoday.com/us/blog/consciously-creating...

https://www.itleftnomarks.com.au/wp-content/uploads/2024/07/...

Before the widespread adoption of pornography, this rate was near 0%. Now we have literally a significant minority of women with permanent brain damage, and unknown harms long-term. The rate of stroke decades later spiking is already linked in some studies to this behavior.

irusensei•3m ago
I think the way Roblox is doing right now separating the users in age groups just makes it easier for predators to find victim.
AndyMcConachie•44m ago
Why can't the EFF tell people to lie? Because if you can get away with it, lying is almost always your best option. Unless there are actual real world consequences to lying like you may anger the police.

And maybe consider using a VPN.

HotGarbage•34m ago
For real. This should be an article about circumvention, not compliance.
nottorp•5m ago
That's not EFFs job, just ask your kids how they circumvent age gates for that :)
kube-system•26m ago
I'd imagine it is because several of the obvious options for "lying" here may violate criminal law. And also because the EFF is an civil liberties advocacy group, they want to change the law, not circumvent it.
izzydata•39m ago
If my options are upload a picture of myself for Google to monetize through ads or not use Google / Youtube then I will be moving on regardless of the inconvenience to myself.
mlinster•39m ago
I think that age verification is important. While its not perfect, it is one tool to help protect kids.
unglaublich•25m ago
Against what? How much struggle and pain are we actually seeing in the world because children have unrestricted internet access?
anthk•23m ago
Call your ISP and ban any NSFW/NSFL access by DNS, both in your children's phones and your home connection. Problem solved.
jmclnx•30m ago
>should I continue to use this service if I have to verify my age?

Simple answer, never accept this If everyone selected "cancel" you can be sure these sites will stop age banning, they wan $ more than anything else.

If a site asks me one question about me, I stop using if.

cloudfudge•28m ago
This makes me wonder if there's a business case for a privacy-preserving identity service which does age verification. Say you have a strong identity provider that you have proven your age to. Just as the 3rd party site could use SSO login from your identity provider, perhaps the identity provider could provide signed evidence to the 3rd party site that asserts "I have verified that this person is age X" but not divulge their identity. Sidestep the privacy issue and just give the 3rd party site what they need to shield them from liability.
dakiol•20m ago
The question is: why would services like Google and others want to use such privacy-preserving identity solutions? They wouldn't gain anything from a non-invasive, user-friendly system, so I don't think they'd use it. They want more data, so they are going for it.
cloudfudge•13m ago
I was thinking someone like Auth0 might want to offer it. They are not in the business of invasive user tracking but are in the business of trust.
awkward•10m ago
The article does go into this and gives lip service to the idea that a secure third party could expose age without exposing identity. Ultimately, there's still the problem that even if point of verification can be done in a zero trust way, you are still entrusting very sensitive information to a third party which is subject to data breach.
dakiol•25m ago
I’ve noticed that many people struggle to simply let things go. Take a hypothetical case where HN requires ID verification. I'd just stop using HN, even if that meant giving up checking tech news. Sometimes things end, and that's fine.

I used to watch good soccer matches on public TV. When services like DAZN appeared, only one major match was available each weekend on public TV. Later, none were free to watch unless you subscribed to a private channel. I didn't want to do that, so I stopped watching soccer. Now I only follow big tournaments like the World cup, which still air on public TV (once every 4 years).

Sometimes you just have to let things go

firefoxd•21m ago
My main concern is that there isn't a reliable way to know your information is securely stored[0].

> A few years ago, I received a letter in the mail addressed to my then-toddler. It was from a company I had never heard of. Apparently, there had been a breach and some customer information had been stolen. They offered a year of credit monitoring and other services. I had to read through every single word in that barrage of text to find out that this was a subcontractor with the hospital where my kids were born. So my kid's information was stolen before he could talk. Interestingly, they didn't send any letter about his twin brother. I'm pretty sure his name was right there next to his brother's in the database.

> Here was a company that I had no interaction with, that I had never done business with, that somehow managed to lose our private information to criminals. That's the problem with online identity. If I upload my ID online for verification, it has to go through the wires. Once it reaches someone else's server, I can never get it back, and I have no control over what they do with it.

All those parties are copying and transferring your information, and it's only a matter of time before it leaks.

[0]: https://idiallo.com/blog/your-id-online-and-offline

miki123211•20m ago
> Even though there’s no way to implement mandated age gates in a way that fully protects speech and privacy rights

I think the EFF would have more success spreading their message if they didn't outright lie in their blog posts. While cryptographic digital ID schemes have their problems (which they address below), they do fully protect privacy rights. So do extremely simple systems like selling age-verification scratchcards in grocery stores, with the same age restrictions as cigarettes or alcohol.

iLoveOncall•18m ago
What a piss poor article.

"We disagree with age gates but our recommendation is to comply". Fuck this.

drnick1•7m ago
Switch VPN region or upload a random picture generated by AI, problem solved.

Verizon, AT&T, and T-Mobile are all having outages now

https://www.howtogeek.com/verizon-att-and-t-mobile-are-all-having-outages-right-now/
1•joering2•41s ago•0 comments

Verizon Outage Affects Users, Tracking Site Shows

https://www.nytimes.com/2026/01/14/business/verizon-outage-downdetector.html
2•jaredwiener•1m ago•0 comments

Useful Chrome DevTools Features You Might Be Missing

https://jsdevspace.substack.com/p/9-useful-chrome-devtools-features
1•javatuts•1m ago•0 comments

World Logic Day 2026

https://worldlogicday.com/
1•tacon•3m ago•1 comments

The unexpected alcohol in everyday food and drink

https://steadydrinker.com/articles/foods-drinks-alcohol/
1•truth_seeker•4m ago•0 comments

Metal Gear Solid (PS1) could switch out a player's TV

https://infosec.exchange/@SecurityWriter/115791488596455266
1•alberto-m•4m ago•0 comments

A Chrome extension that adds power features to ChatGPT

https://chromewebstore.google.com/detail/chatgpt-power-supercharge/boadmpgcibaekkfjllnahedejfgeehga
1•nitrotechgames•5m ago•1 comments

Advocacy groups call on Apple, Google to drop X and Grok from app stores

https://www.reuters.com/sustainability/society-equity/womens-advocacy-groups-call-apple-google-dr...
1•SilverElfin•5m ago•1 comments

Risk to AI investors, IDed via my Microsoft-/Amazon-/VC-praised AI-preneurship

https://frankruscica.substack.com/p/risk-to-ai-investors
1•frankruscica•5m ago•0 comments

Six Principles for More Rigorous Evaluation of Cognitive Capacities

https://aiguide.substack.com/p/on-evaluating-cognitive-capabilities
1•stephendause•6m ago•0 comments

Blocking Countries Because of Scrapers

https://www.coryd.dev/posts/2026/blocking-entire-countries-because-of-scrapers
1•cdrnsf•7m ago•0 comments

Ask HN: How do you safely give LLMs SSH/DB access?

1•nico•7m ago•1 comments

US to suspend immigrant visa processing for 75 nations, State Department says

https://www.reuters.com/world/us/us-suspend-visa-processing-75-nations-next-week-fox-news-reports...
6•Imustaskforhelp•10m ago•3 comments

Show HN: Nuria – Build better eating habits with photo, text, or voice tracking

https://nuria.info
2•pavelmolodecfd•11m ago•1 comments

Firebase Data Connect: Build secure, scalable apps on PostgreSQL

https://firebase.google.com/products/data-connect
1•tosh•12m ago•0 comments

Pushing Frontier AI to Its Limits

https://blog.duyet.net/2026/01/ai/
1•duyet•12m ago•0 comments

Show HN: ViaHuman, app for LLMs to send me notifications

https://www.viahuman.xyz/
1•pdrojack•14m ago•0 comments

East coast. Verizon outage in US

https://www.firstcoastnews.com/article/news/nation-world/verizon-outage-reported/507-ef3cb3d0-f59...
13•Scubabear68•15m ago•1 comments

Critical analysis of digital euro published

https://www.taler.net/en/news/2026-02.html
2•F3nd0•16m ago•1 comments

Ask HN: Any evidence AI coding assistants are helping open source projects?

3•UncleOxidant•18m ago•0 comments

Show HN: Repomance: A Tinder style app for GitHub repo discovery

https://apps.apple.com/us/app/repomance/id6756920720
2•masterpos•19m ago•0 comments

How the age of motoring shaped our modern world

https://www.bbc.com/news/articles/c62d5wg4lypo
2•Stratoscope•19m ago•0 comments

NASA to Develop Lunar Reactor by 2030

https://www.nasa.gov/news-release/nasa-department-of-energy-to-develop-lunar-surface-reactor-by-2...
2•ghostoftiber•19m ago•1 comments

Generative Video Compression: 0.01% Compression Rate for Video Transmission

https://www.alphaxiv.org/overview/2512.24300v1
1•ksec•20m ago•0 comments

Gamers Overwhelmingly Hate Gen AI in Games, Major Industry Report Finds

https://wjamesau.substack.com/p/gamers-overwhelmingly-hate-gen-ai
1•SLHamlet•20m ago•0 comments

What Is Maintenance, Anyway?

https://blog.rust-lang.org/inside-rust/2026/01/12/what-is-maintenance-anyway/
2•weinzierl•20m ago•0 comments

Show HN: 'Irrational' Tools – Perception-first color/image utilities

https://irrationaltools.com/color-palette-generator/
1•piyush_soni•21m ago•0 comments

AI Can't Touch These Skilled Trade Jobs. If Only Enough Humans Would Fill Them

https://www.wsj.com/lifestyle/careers/ai-cant-touch-these-skilled-trade-jobs-if-only-enough-human...
3•thm•22m ago•0 comments

Native ZFS VDEV for Object Storage (OpenZFS Summit)

https://www.zettalane.com/blog/openzfs-summit-2025-mayanas-objbacker.html
1•suprasam•24m ago•0 comments

Global AI computing capacity is doubling every 7 months

https://epoch.ai/data-insights/ai-chip-production
1•gmays•24m ago•0 comments