this post was submitted on 19 Feb 2026
1273 points (99.8% liked)

Privacy

9136 readers
451 users here now

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling

founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] Furbag@lemmy.world 122 points 2 weeks ago (4 children)

Jesus Christ, what the fuck is going on in the UK and the rest of Europe right now with this age verification nanny state shit?

If I ran a website that would be subject to these new regulations, do you know what I would do? I'd fucking IP ban all of the United Kingdom, not comply in advance with this fascist horseshit.

If there's one silver lining about this digital insanity going on right now, it's that governments and corporations are essentially forcing users underground, and the dark web (unindexed websites) has the potential to grow and thrive as a result. We might have an opportunity to take the internet back from those who are trying to tighten their grip around the free and unfettered flow of information.

[–] yermaw@sh.itjust.works 45 points 2 weeks ago (1 children)

A lot of websites have already done that. A lot of image hosting sites. If I forget to turn the VPN on my feed looks about 30% like this

load more comments (1 replies)
[–] Restaldt@lemmy.world 20 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

The deepstate is real. Its Right here cumming for your porn.

To get a little more serious about it look into Who is buying our media outlets and who is buying our financial outlets (visa/mastercard).

This is almost always being pushed by a rightwing cult. Sorry "thinktank".

load more comments (1 replies)
[–] cupcakezealot@piefed.blahaj.zone 14 points 2 weeks ago (1 children)

newspapers owned by foreign billionaires and shitty childrens authors that give epstein tickets to her play for children

load more comments (1 replies)
load more comments (1 replies)
[–] Archangel1313@lemmy.ca 117 points 2 weeks ago (5 children)

So...what's the point in even using a VPN, if you have to identify yourself just to use it? The whole point is to browse the web anonymously.

[–] bumblefumble@mander.xyz 55 points 2 weeks ago (1 children)

It's not the only use. VPNs can be used to access local servers remotely, for example your jobs server while WFH.

[–] qqq@lemmy.world 16 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

I'd take it a step further and say it's not even a use of a VPN at all. If you want to browse the web anonymously a VPN doesn't provide that guarantee: it only affects your source IP, which most services probably understand is unreliable for tracking purposes anyway.

Even for changing your IP to aid in being anonymous on the web, TOR is the network layer tool to use, because you will have a much wider range of source IPs than the single one you'll get from the VPN, but there is still so much work to do to "browse the web anonymously".

I think a lot of people don't understand VPNs. They're great privacy tools if you don't trust the local network or your ISP, as all traffic is typically encrypted and headed for the same server, but being anonymous on the web is way more involved because you are much more than your IP address.

Btw I'm not replying here thinking you don't understand all that; just expanding on the conversation

load more comments (2 replies)
[–] Aceticon@lemmy.dbzer0.com 14 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

First: VPNs are also used by businesses to allow access for remote workers and sites to the company's internal network. In fact, this used to be their most common use and maybe still is.

Second: what's stopping a foreign VPN provider from offering a VPN service to UK customers without forcing them to identify themselves? If such a company doesn't have UK owners, workers or assets all that the UK authorities could do to enforce a court judgement against them is force British ISPs to block the IP addresses of that provider's VPN servers, which would easilly turn into an a whack-a-mole situation, more so if VPS providers started selling "easy personal VPN server setup" facilities for their virtual personal servers which would make that an insane whack-a-mole situation.

The "VPN server on a rented VPS" situation could easilly turn trully insane to try to block - there are A LOT of VPS providers outside the UK selling pretty cheap services good enough to run a personal VPN server and even without the VPS providers leaning into it by providing an out-of-the-box option (and merelly supporting Turnkey Linux images means having two linux server images that work as VPN servers out of the box), step by step instruction of how to make it work with normal server distros will soon emerge and become common knowledge amongst Britons with even just basic technical skills.

In summary, the UK is a pigmy trying to look like a giant when it comes to how much their laws will influence foreign VPN providers in a market which is pretty competitive and were there is no one dominant market participant which can be pressured to have an implementation "for UK customers only", and even if they found a way to enforce that law on all foreign VPN providers, that's not enough at a technical level to stop people altogether from having access to no-authentication VPN service since anybody can rent a VPS anywhere and run their own VPN server in it.

load more comments (1 replies)
load more comments (3 replies)
[–] skisnow@lemmy.ca 66 points 2 weeks ago (1 children)

There's plenty of ways age checking could be decoupled from identity checking, and I find it extremely suspicious that the proponents of these laws aren't promoting them.

[–] wylinka@szmer.info 9 points 2 weeks ago (12 children)
[–] skisnow@lemmy.ca 29 points 2 weeks ago

There's lots of cryptographic type approaches where the entity validating you is air-gapped from the entity certifying your age.

But if you don't trust them it's not hard to figure out a scratchcard system where for, say, £1 cash your local newsagent checks your ID and lets you pick a card that you scratch off to get a code that you can then use to obtain a cryptographic token online signed by a recognized CA. Neither the newsagent nor the card issuer have any way of tying you to that code, and if you don't like the idea of using the same token on multiple sites you can always buy more. Of course you'd also have the option of obtaining codes online, but there's something I think people would find reassuring about the existence of a visible physical gap.

load more comments (11 replies)
[–] osanna@thebrainbin.org 51 points 2 weeks ago (14 children)

if people are technically inclined, a service like Tailscale can be used to circumvent things like the online safety act. with the exit nodes.

[–] osanna@thebrainbin.org 23 points 2 weeks ago (2 children)
[–] zo0@programming.dev 41 points 2 weeks ago (2 children)

Roll up your own vpn? Where the server is in your name? Or your home IP?

[–] osanna@thebrainbin.org 24 points 2 weeks ago

yeah, it’s not even close to being anonymous, but at least you will get out of the OSA bullshit

[–] Wildmimic@anarchist.nexus 9 points 2 weeks ago (11 children)

Just use your server to connect to Mullvad

load more comments (11 replies)
[–] sp3ctr4l@lemmy.dbzer0.com 10 points 2 weeks ago* (last edited 2 weeks ago) (10 children)

I2P.

Essentially, what if the entire internet worked kinda like how torrents do, and was also anonymized and E2EE?

Well, it would be pretty slow, but it would also be extremely distributed and difficult to censor/disrupt.

Basically, everyone on I2P is a micro-relay for everyone else.

load more comments (10 replies)
load more comments (13 replies)
[–] avg@lemmy.zip 43 points 2 weeks ago (2 children)

Every politician proposing such rules must first make their browsing history public, it should go both ways right?

[–] artyom@piefed.social 14 points 2 weeks ago

I've always wondered why we aren't buying/hacking info about politicians that support anti-privacy legislation from these databrokers and leaking it to the public. If I had the knowledge that's what I'd be doing. I can't think of anything that would be more effective.

[–] Aceticon@lemmy.dbzer0.com 10 points 2 weeks ago* (last edited 2 weeks ago)

Cameras everwhere they are and following them everywhere, always on recording of their means of communication, all free to access by anybody at any time.

Surely those politicians "have nothing to hide"?

[–] commie@lemmy.dbzer0.com 39 points 2 weeks ago (4 children)
ssh -D 1337 anywhere@elseinthe.world

is this a VPN?

[–] Sabata11792@ani.social 25 points 2 weeks ago (1 children)

Oi, you got a loicense for that session?

load more comments (1 replies)
load more comments (3 replies)
[–] BlueKey@fedia.io 32 points 2 weeks ago (3 children)

How should this be enforced? Mullvad doesn't even know where the customers are from (if they pay anonymosly), so they can't check if the legislation applies to a specific customer.

Also (and I'm not trying to legitimate such law projects), age verification without identity leak is possible. The government needs to distribute a ZK proof system linked to ID cards which creates a signed proof including "holder of the ID is over/under 18" and a service-dependend pseudonym (to prevent repeating the proof for other users).

[–] Strawberry@sh.itjust.works 39 points 2 weeks ago (3 children)

I don't think it's intended to be enforced very well, just to 'boil the frog' so to say. Either that or incompetence & not realising it won't work.

Even if it passes and isn't enforced well it'll legitimise more surveillance & identity checks. It'll probably be terrible for privacy on people who aren't as tech literate to avoid it.

[–] justsomeguy@lemmy.world 19 points 2 weeks ago

This is pretty much it. Someone will google "what's the best VPN" and get an AI generated answer that leads them to some bigger service that adheres to identification laws. That'll filter most regular users.

load more comments (2 replies)
load more comments (2 replies)
[–] manxu@piefed.social 31 points 2 weeks ago

It's not just age verification: the identity-verifying document's image is kept on servers for future use. Theoretically by governments verifying, practically so that everyone's identity can be highjacked in a leak.

Adult verification is simply determining a single bit: is this person an adult or not? We have had zero-knowledge proof for ages: if the government really wanted to determine this single bit, it could do so without jeopardizing everyone's privacy and online security.

[–] Lojcs@piefed.social 27 points 2 weeks ago (4 children)

I wonder if in the future we'll get to know exactly who pressed the digital freedoms crackdown button on the summer of 2025. Things were going backwards already before then but the sudden acceleration is curious and concerning to me.

[–] DeathsEmbrace@lemmy.world 20 points 2 weeks ago (1 children)

It's to move to a risk management based society. Look at the sociology behind all of this and you would see a counter example. this was already being accelerated the first step was facial recognition years ago. Surveillance states are defaults in risk management societies. In a nutshell if we treat everyone like a criminal then its only a matter of time before we catch someone is their consciousness going forward.

load more comments (1 replies)
load more comments (3 replies)
[–] magnolia_mayhem@lemmy.world 20 points 2 weeks ago (1 children)

When do we just start killing politicians?

[–] Psythik@lemmy.world 20 points 2 weeks ago (1 children)

46 years ago. Start with Reagan.

load more comments (1 replies)
[–] cyberpunk007@lemmy.ca 20 points 2 weeks ago (2 children)

Just goes to show governments still don't understand technology.

Rent a cloud server somewhere and create a tunnel to it, done.

[–] surewhynotlem@lemmy.world 16 points 2 weeks ago (1 children)

Rent a cloud server and create a financial paper trail

load more comments (1 replies)
[–] UnderpantsWeevil@lemmy.world 20 points 2 weeks ago* (last edited 2 weeks ago)

That's going to be a crazy policy to try and enforce. Reminds me of the US attempt to ban sports gambling online but only domestically. That just prompted people to make accounts overseas.

As usual, the governmental response is to increase the surveillance state and punish the end users, without addressing the incentive to create or distribute illicit content. They're just feeding a sprawling black market which... may be the intent. Black markets are notoriously unregulated and far easier to manipulate/gouge/swindle people over.

[–] Krauerking@lemy.lol 20 points 2 weeks ago

Gotta punish the peasants for daring to look into the private life of the pedophiles.

Have you considered how you use the internet and don't spend enough money to be a greater sin? You should.

[–] possiblylinux127@lemmy.zip 17 points 2 weeks ago (3 children)

I like how this is the same country that brought us 1984

[–] UnderpantsWeevil@lemmy.world 11 points 2 weeks ago

Orwell was a British police officer in Myanmar, crushing independence movements and worker organizations, during the early parts of his career.

He wrote these books from lived experience. As propaganda tools to antagonize against the USSR, they were brilliant expressions of the very Doublespeak his most famous book coined. Using fear of the foreigner to rally people into the Two Minute Hate sessions he ostensibly pillared.

load more comments (2 replies)
[–] qwerty@discuss.tchncs.de 15 points 2 weeks ago (4 children)

Next step will be a country wide captive portal where you need to log in with your digital id just to get on the Internet at all. We should all start looking into decentralized network infrastructure like a wifi&lora meshnet or community run satellite connection. There already is a network stack with an active community that allows that called reticulum. It can be incorporated into the existing infrastructure of meshtastic, i2p, wifi meshnets etc.

[–] LH0ezVT@sh.itjust.works 8 points 2 weeks ago (1 children)

Next step would be to make owning such devices illegal :(

load more comments (1 replies)
load more comments (3 replies)
[–] ClockworkOtter@lemmy.world 13 points 2 weeks ago (4 children)

So could I VPN out of the UK to circumvent the VPN verification step?

load more comments (4 replies)
[–] KelvarCherry@lemmy.blahaj.zone 11 points 1 week ago* (last edited 1 week ago)

Gonna say the thing: IDGAF if kids see porn online. I'd far prefer children explore pornography and learn what they are and are not comfortable with; rather than risk being exploited by less-naive children or adults. Open access to porn is the harm reduction. They are images on a screen.

Let's not pretend that today's adults never saw porn growing up. I, a Gen Z kid, saw porn at young ages. There are reasons I am "off" in the head but none of them have to do with porn; and many of them have to do from forces who, among other things, push the purity culture narrative. This is the exact same over-dramatic messaging as the USA's War on Drugs or its "Satanic Panic"—both of which source from purity culture and both of which have harmed significantly more kids than what they hoped regulate.

[–] NoneOfUrBusiness@fedia.io 11 points 2 weeks ago (1 children)

I think we all know what happens to declining empires, but is anyone clear on whether that's supposed to happen to their vassals too?

load more comments (1 replies)
[–] abbiistabbii@piefed.blahaj.zone 10 points 2 weeks ago

I wonder how many MPs and Lords use VPNs. It would be a shame if someone leaked which MPs and Lords were regularly using VPNs.

[–] Sbergon@discuss.tchncs.de 10 points 2 weeks ago (1 children)

Is this actually possible to enforce? To stay with the example of Mullvad, you could still send an envelope full of cash over to Sweden to add time to your account (or create a new one).

load more comments (1 replies)
[–] quick_snail@feddit.nl 9 points 2 weeks ago* (last edited 2 weeks ago)

Guess the number of tor users in the UK is about to explode

[–] quick_snail@feddit.nl 8 points 2 weeks ago

Fortunately all the good VPN providers have onion services and accept monero

load more comments
view more: next ›