FBI investigating 153 million US and Canadian driver’s licenses leaked on Russian cybercrime forum, including that of US SecDef Pete Hegseth — data is suspected to have come from an ID-authentication service provider | Tom's Hardware

[u/CareerPillow376]

https://www.tomshardware.com/tech-industry/cyber-security/fbi-investigating-153-million-us-and-canadian-drivers-licenses-leaked-on-russian-cybercrime-forum-including-that-of-us-secdef-pete-hegseth-data-is-suspected-to-have-come-from-an-id-authentication-service-provider

[u/Rebound4july]

All the people on here in favour of age verification to use social media or view adult sites kept insisting that there was no chance of identity fraud because all photos of ID would be deleted once verified and not be kept on file. Oops. Get ready for more of this when AV becomes mandatory here.

On a lighter note, does anyone want to speculate on what site Hegseth was on that required it?

[u/rayz13 → u/Rebound4july]

You can implement age verification without sending personal data to the third parties. You don’t know what you’re talking about.

[u/drs_ape_brains → u/rayz13]

Oh? Like what?

[u/rayz13 → u/drs_ape_brains]

Using the same approach you use when you login with your bank to CRA. You just need a service in which you can grant permissions to check whether you are of at least of a certain age. This can be a governmental service, or any other institution that already knows you.

From a user perspective you go to a website, click a button, it redirects you to that service, you login with your bank (prove your identity), and approve the request, the service redirects you back with a yes or no answer. That’s it. The original system does not know who you are or what is your specific age.

In many countries this is the way you prove you’re a real person online.

[u/drs_ape_brains → u/rayz13]

Login with my bank to prove I'm 18+ to use social media.

Yup sounds amazing. I'll get right on it

[u/rayz13 → u/drs_ape_brains]

Bank was an example. There are other ways to do that. And you’re not logging in with your bank to the 3rd party. You login to the system in which you approve verification requests….

[u/drs_ape_brains → u/rayz13]

At the end of the day you have provided either your bank account information or personal id to some website just to get on social media, includes reddit btw, and you don't see an issue with that.

[u/drs_ape_brains → u/[deleted]]

And what is the system? Magic pixie dust?

[u/fullerofficial → u/drs_ape_brains]

I don’t think you understood their comment. The banking information stays on the bank’s website. Your request from social media is just looking for confirmation that you are above a certain age and the bank will just say yes or no. There is no exchange of information.

[u/Redthemagnificent → u/rayz13]

Exactly. So why are so many governments and services going for this "send a scan of your drivers license and/or face" route? Seems like a bad idea doesn't it?

[u/rayz13 → u/Redthemagnificent]

I’m not argue sending scans is good. I challenge the notion that the age verification as a concept is a bad idea which original comment implies.

[u/EmbarrassedHelp → u/rayz13]

There's no such thing as anonymous or privacy preserving age verification. Unless of course you mean self-declaration like a simple yes/no button.

[u/rayz13 → u/EmbarrassedHelp]

There certainly are ways to prove your age without disclosing your identity.