Conversation

Notices

1. Embed this notice
   Blake (Pandora Blake) (pandorablake@mstdn.party)'s status on Sunday, 19-Jan-2025 01:05:19 JST Blake (Pandora Blake)

   Okay, this is the first really interesting one I've found...

   https://go.cam/en/

   Open source
   Available on GitHub
   Free to use if you self-host

   #AgeVerification

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Sunday, 19-Jan-2025 01:05:16 JST Rich Felker

     in reply to

     @pandorablake Um, demanding users let someone take their picture IS fucking over your users.

     FFS STOP trying to comply with this shit. Move hosting, obfuscate ownership.

   • Embed this notice
     Blake (Pandora Blake) (pandorablake@mstdn.party)'s status on Sunday, 19-Jan-2025 01:05:17 JST Blake (Pandora Blake)

     in reply to

     And if it doesn't pass muster, it's open source, so we could potentially modify it until it did what we needed.

     It's published under AGPL 3.0, so any modifications would need to be made publicly available. Which is great actually!

     I want to crowd-source a team of people who can make this happen. This could be exactly what's needed to allow small sites to comply with the OSA without screwing over our users.

   • Embed this notice
     Blake (Pandora Blake) (pandorablake@mstdn.party)'s status on Sunday, 19-Jan-2025 01:05:18 JST Blake (Pandora Blake)

     in reply to

     The main problem with any AV solution is auditing the code. Even if they claim they're secure and privacy respecting, how do we know that the design and the implementation actually do what they claim? Auditing proprietary code is a total faff.

     But this is open source. Very easy to have a look! I've already cloned it on GitHub. It's written in node.js, so to have a proper look at it and understand what it does and how I'll need someone fluent in JavaScript...

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Sunday, 19-Jan-2025 12:21:24 JST Rich Felker

     in reply to

     @pandorablake Somewhere outside the UK. If further obfuscation is needed, the actual hosting can be wherever you want, linked by wireguard or other VPN to the fronting VPS in a favorable jurisdiction, so that authorities in your jurisdiction can't tell where the actual server is. This is how pirate type sites have operated for decades.

   • Embed this notice
     Blake (Pandora Blake) (pandorablake@mstdn.party)'s status on Sunday, 19-Jan-2025 12:21:25 JST Blake (Pandora Blake)

     in reply to

     • Rich Felker

     @dalias
     Move hosting to where?

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Sunday, 19-Jan-2025 18:04:28 JST Rich Felker

     in reply to

     @pandorablake By "obfuscating ownership" I mean plausible "That's not my site. Who knows who owns it, but presumably not someone in the UK."

   • Embed this notice
     Blake (Pandora Blake) (pandorablake@mstdn.party)'s status on Sunday, 19-Jan-2025 18:04:29 JST Blake (Pandora Blake)

     in reply to

     • Rich Felker

     @dalias
     I'm already hosted outside the UK! As it happens, the OSA applies to any site accessible within the UK. I certainly don't intend to comply until I'm asked to, but I need to be able to comply when I'm asked to in order to avoid a fine, and that means preparing in advance.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Sunday, 19-Jan-2025 18:06:42 JST Rich Felker

     in reply to

     @pandorablake OSA does not apply to "any site accessible from the UK" because, despite the historical fantasy or any delusions perpetuating that, UK does not have jurisdiction over the whole world, only people/entities within their borders.