Face scan is actually much easier to defeat than CC details.
Nowadays with VISA ‘3D Secure’ and the equivalent on Mastercard you have to validate your legal name attached to the credit card, this is done via third-party which can request details your bank has on file (often your home address or mobile number), and even while those details are not supposed to be shared with the merchant (we know how careful banks are about keeping control of PII), the core detail - your legal name, is confirmed. It is not hard to tie a user to other data via data brokers once you have their legal name, and credit card number, and any other details they may share with the service (email, phone, etc).
Face scan is actually much easier to defeat than CC details.
I don’t understand. You don’t need to “defeat” CC details.
They do not contain your age or your govt documents. Even if they did, a child is likely just going to use their parents’ CC. So it’s not a form of age verification at all.
In context, defeating the privacy exposure of requiring to use CC details would be buy getting an a anonymous credit card, which in most countries are now either very difficult to obtain or simply no longer offered (outlawed).
Using a credit card or an ID are both just using a physical item to ‘verify’ an age of someone who may or may not be that person. Getting a credit card has a minimum age, so the end goal of age ‘verification’ is met either way although the ID has way more personally identifiable information like skin color, actual birth date, gender, etc.
It isn’t like scanning an ID verifies that the person scanning the ID is the person on the computer.
How does CC details qualify as age verification? It’s WAY better than gov ID or face scan.
I just mean this type of business model is ripe for enshittification.
Face scan is actually much easier to defeat than CC details.
Nowadays with VISA ‘3D Secure’ and the equivalent on Mastercard you have to validate your legal name attached to the credit card, this is done via third-party which can request details your bank has on file (often your home address or mobile number), and even while those details are not supposed to be shared with the merchant (we know how careful banks are about keeping control of PII), the core detail - your legal name, is confirmed. It is not hard to tie a user to other data via data brokers once you have their legal name, and credit card number, and any other details they may share with the service (email, phone, etc).
I don’t understand. You don’t need to “defeat” CC details.
They do not contain your age or your govt documents. Even if they did, a child is likely just going to use their parents’ CC. So it’s not a form of age verification at all.
In context, defeating the privacy exposure of requiring to use CC details would be buy getting an a anonymous credit card, which in most countries are now either very difficult to obtain or simply no longer offered (outlawed).
Hope that helps.
It is the same effectiveness of scanning an ID since that could also be their parent’s.
The point of scanning the ID is (supposedly) to verify the age of the user, not their parents.
Using a credit card or an ID are both just using a physical item to ‘verify’ an age of someone who may or may not be that person. Getting a credit card has a minimum age, so the end goal of age ‘verification’ is met either way although the ID has way more personally identifiable information like skin color, actual birth date, gender, etc.
It isn’t like scanning an ID verifies that the person scanning the ID is the person on the computer.
Not true, anyone can become a “verified user” on another’s account. That’s what my parents did when I was a kid.
You are a verified user for their account. That is literally using their card with extra steps.
Also, there is frequently an age 13 requirement to be an authorized user which would count for everything except porn.
Right, which is different from the user’s account, and thus does not verify their age.
Discord doesn’t have a 13 age group. It’s just adults and children.