I've long held a belief that if countries want to mandate compliance, they should be required to provide the mechanism for compliance.
Want to deem whether content is allowed or not? Fine, provide an API that allows content to be scanned and return a bool.
Want to age-gate content? Fine, provide an identity service.
While both of these will reduce privacy, they'll achieve one of two objectives: Either those making these policies will realize the law they wrote is impossible to achieve, or it will at least provide an even playing field for startups vs incumbents if they succeed.
There are simply no offline business models of user generated content, so this comparison doesn't hold at all. Whenever somebody comes up with such a offline business, we will see about it at that point.
Tell me in which case a place like a restaurant or a movie theater was found to be liable because a consumer suddenly decided to speak harmful speech or violating someone else privacy?...
Show me one place like a restaurant or a movie theater where I can put a poster in their shop window without them asking questions about the content of the poster.
Many countries fail to provide their citizens with digital identification while enforcing age limits and such, but at least most of Europe will have solutions for both of these soon. Plus, "complying with the law threatens my bottom line" has never been a reason to ignore the law anyway. If restaurants were run like internet companies, people would die of food poisoning every day because "it'd be too much of a burden to check if _every_ ingredient is in date before cooking".
This proves that the laws they write are actually quite possible to achieve. It'll happen at the cost of some freedom and many of the nice things about the internet in general, but if you're a businessman looking at business potential and don't care too much about artistic creativity, the impact is actually quite minimal. I'm glad UK and US companies are hiring the most incompetent and useless "verification" companies out there to punish the government through a weird form of malicious compliance, but that won't last.
> Want to deem whether content is allowed or not? Fine, provide an API that allows content to be scanned and return a bool.
These mechanisms not only exist, governments try their best to convince people to use them. I don't think you'll get away in court arguing that there is no accessible service for you to use. What happens when you fail after applying one of these services is up for debate, but so far, laws just want you to try your best to prevent abuse, and existing services are enough for that.
> Want to age-gate content? Fine, provide an identity service.
This is a problem now, but privacy-safe age verification is rolling out across the EU in the coming years. This is actually a super easy problem to solve when the government puts in the bare minimum amount of work. A decent argument against the UK/US/etc. but not so much so for an EU member state like in this court case.
For the reference implementation that will not actually be deployed as an official solution so far, yes. Although you could also go with an Apple account.
In fact, I don't think you technically need to be signed into a Google account for Play Verification to pass, though many phones do make completing the Google sign-in a requirement.
> For the reference implementation that will not actually be deployed as an official solution so far, yes
...or the IT-Wallet which is currently deployed, and who's developers stubbornly refuse to remove the requirement.
> In fact, I don't think you technically need to be signed into a Google account for Play Verification to pass
And you're wrong, Play Integrity checks that your phone's account really downloaded the app from the Play Store, and so requires a (signed-in) account.
> many phones do make completing the Google sign-in a requirement
I'm not aware of any such phone, although they sure make it seem like it's a requirement
> Although you could also go with an Apple account
With a cheap, and very open and privacy-respecting, iPhone
> If restaurants were run like internet companies, people would die of food poisoning every day because "it'd be too much of a burden to check if _every_ ingredient is in date before cooking".
The issue with this is internet companies are subject to the laws of all countries, whereas restaurants are subject to the laws they are located in. While someone at the scale of McDonalds may be able to handle laws at a worldwide scale, a small food truck cannot.
...of all countries involved, and the EU already offers a fairly comprehensive common legal framework for many related countries. But, why would that small food truck in Italy care about Mongolian laws? Or maybe I just misunderstood you, please correct me.
Please don't fulminate or post shallow dismissals on HN.
It's valid to argue that laws should be legible and reasonably straightforward to comply with, and to point out that society as a whole doesn't benefit if only already-dominant global megacorps can afford to comply with laws (or bear the cost of non-compliance).
Let's make the effort to discuss the topic in a curious, conversational way, rather than with this belligerent tone. The guidelines make it clear we're looking for a higher standard of discourse than this. https://news.ycombinator.com/newsguidelines.html
Yes really, we’re here for curious conversation, not sneers, swipes and shallow dismissals. The guidelines couldn’t be clearer about this, and most others in this subthread were able to discuss the topic curiously.
Please don't comment like this on HN. It's fair enough to express disagreement with the parent comment, and I've replied to them asking them to avoid fulminating and making shallow dismissals.
But this kind of reply is also in breach of the guidelines. Replying to a bad comment with an even worse one is how death-spirals happen, and that's exactly what we're trying to avoid on HN. We've had to ask you several times before to follow the guidelines. We have to ban accounts that keep ignoring our requests. https://news.ycombinator.com/newsguidelines.html
Want to deem whether content is allowed or not? Fine, provide an API that allows content to be scanned and return a bool.
Want to age-gate content? Fine, provide an identity service.
While both of these will reduce privacy, they'll achieve one of two objectives: Either those making these policies will realize the law they wrote is impossible to achieve, or it will at least provide an even playing field for startups vs incumbents if they succeed.