Tag: digital id

Read Between the Lies: A Pattern Recognition Guide

When Avril Haines, Director of National Intelligence, announced during Event 201’s pandemic drill in 2019 that they would “flood the zone with trusted sources,” few understood this preview of coordinated narrative control. Within months, we watched it unfold in real time—unified messaging across all platforms, suppression of dissent, and coordinated narrative control that fooled much of the world.

But not everyone stayed fooled forever. Some saw through it immediately, questioning every aspect from day one. Others thought it was just incompetent government trying to protect us. Many initially accepted the precautionary principle—better safe than sorry. But as each policy failure pointed in the same direction—toward more control and less human agency—the pattern became impossible to ignore. Anyone not completely subsumed by the system eventually had to confront its true purpose: not protecting health or safety, but expanding control.

Once you recognize this pattern of deception, two questions should immediately arise whenever major stories dominate headlines: “What are they lying about?” and “What are they distracting us from?” The pattern of coordinated deception becomes unmistakable. Consider how media outlets spent three years pushing Russiagate conspiracies, driving unprecedented social division while laying the groundwork for what would become the greatest psychological operation in history. Today, while the media floods us with Ukraine coverage, BlackRock positions itself to profit from both the destruction and reconstruction. The pattern becomes unmistakable once you see it—manufactured crises driving pre-planned “solutions” that always expand institutional control.

Mainstream media operates on twin deceptions: misdirection and manipulation. The same anchors who sold us WMDs in Iraq, promoted “Russia collusion,” and insisted Hunter Biden’s laptop was “Russian disinformation” still occupy prime time slots. Just as we see with RFK, Jr.’s HHS nomination, the pattern is consistent: coordinated attacks replace substantive debate, identical talking points appear across networks, and legitimate questions are dismissed through character assassination rather than evidence. Being consistently wrong isn’t a bug—it’s a feature. Their role isn’t to inform but to manufacture consent.

The template is consistent: Saturate media with emotional spectacles while advancing institutional agendas with minimal scrutiny. Like learning to spot a fake smile or hearing a false note in music, you develop an instinct for the timing:

Money and Power:

Medical Control:

Digital Control:

As these deceptions become more obvious, different forms of resistance emerge. The truth-seeking takes different forms. Some become deep experts in specific deceptions—documenting early treatment successes with repurposed drugs, uncovering hospital protocol failures, or exploring the impact of vaccine injuries. Others develop a broader lens for seeing how narratives themselves are engineered.

Keep reading

Mark Zuckerberg’s Meta Calls on YouTube and TikTok to Match Its Teen Safeguards

Mark Zuckerberg’s Meta will pay $18 billion to settle a federal lawsuit accusing it of fueling a teen mental health crisis, but nearly a third of that sum depends on whether TikTok and YouTube agree to adopt the same safeguards. The social media giant is now directly calling on its largest competitors to follow Zuckerberg’s lead.

The settlement announced just days into a trial brought by a coalition of state attorneys general, resolves claims that Meta hooked children on its platforms and ignored the resulting harms, including anxiety, depression and suicide, to protect its profits. Meta will pay 70 percent of the total, about $12.7 billion, upfront. The remaining $5.3 billion only gets released if TikTok and Google’s YouTube together pay a matching $5.3 billion and adopt the same restrictions Meta is imposing on itself.

Those required changes include a one-hour daily usage limit for teens, a “night mode” that blocks access during bedtime hours, and age verification measures. Meta agreed to a two-hour daily limit for teens on Facebook and Instagram, which would drop to one hour if TikTok and YouTube fall in line. The night mode default would block teen access from midnight to 6:00 a.m. Most provisions in the settlement are set to last 10 years.

Meta is also banning filters for “cosmetic surgery and extreme makeup,” removing “Likes” and other reactions from teen posts by default, and strengthening parental oversight tools. The settlement leaves Meta’s recommendation algorithm, the system that decides what content teens see, untouched.

Meta published an open letter calling out its rivals directly, writing that “these protections will only be truly effective if we work with our peers — TikTok and YouTube — to put the same measures in place.” As of Wednesday afternoon, neither company had responded, despite multiple requests for comment. TikTok recently settled a separate, unrelated case with the DOJ for $400 million over children’s privacy.

Keep reading

Google To Expand Play Age Signals API to All Users Worldwide

Just in time for the global digital ID push, Google will roll out its Play Age Signals API to all Google Play users worldwide by the end of 2026. This gives Android apps an easy way to ask Google how old its users are.

Google Play’s vice president of product management, Paul Feng, announced the expansion on July 29. Australia and Canada come first by mid-August, followed by “a full global rollout to all users later this year.” Apple launched its own version, the Declared Age Range API, worldwide in February.

An app calls the API while it’s running and Play answers with the band the user falls into, 0-12, 13-15, 16-17, or 18+ by default. Developers can redraw those bands in the Play Console. A developer who sets minimum ages of 13 and 17 gets users sorted into 0-12, 13-16, and 17 and over.

The feedback arrives as a lower and an upper bound, and the top band carries no upper bound, so an adult in that setup comes back as ageLower = 17, an age floor with no ceiling. A user who declined to share gets no band at all, only a NOT_SHARED status. Google’s rules bar any other use of the answer, “including, but not limited to, advertising, marketing, user profiling or analytics.”

To parents, Google says the API as “a privacy-preserving tool that puts parents in the driver’s seat.” A parent enters a child’s range once in the Family Link app, 16-17 rather than an exact birth date and every app that has built in the API can read it. Google says sharing is off until a parent opts in and that the setting can be changed or switched off at any time.

That default lasts until a law overrides it and Texas already has and you only have to look at the latest senate bill that we just covered to know exactly how this “privacy” preserving plan can end up being anything but. Adults can share their own range when an app asks. “Providing a safe online experience and protecting users from harm is a top priority at Google Play,” Feng wrote in his announcement.

Apps receive more than a band. Google’s developer pages say an app can receive “users’ age verification or supervision status, age ranges, and other applicable signals,” and the status field can also come back VERIFICATION_REQUIRED. A developer knows when a user declined to share and when an age was verified rather than declared, and Google leaves it to each app to decide what to accept. TechRadar, citing reports, says users who fail to complete verification can be blocked from downloading a wide range of apps, not just those with adult ratings.

The API went live in Brazil on March 17, the day the Digital ECA took effect. That law bans the “I am over 18” checkbox and threatens fines of up to 50 million reais, about US$9.44 million, or 10 percent of a company’s Brazilian revenue. Texas followed.

Play began returning ages and running an age verification flow for Texans who created accounts after May 28, once a federal appeals court stayed the December 2025 injunction that had blocked the state’s App Store Accountability Act.

Keep reading

A Law That the People It Targets Can Defeat With a Felt-Tip Pen

The Online Safety (Minimum Age and Child Safety Risk Assessment) Bill was introduced on 24 August 2026 – the very day I arrived back in New Zealand after nearly a month away.

Readers of “A Halflings View” will be well aware of my views about bans or restrictions on access to social media platform by the young. Although the news media have trumpeted the present proposals as a “ban” it is not. It actually constitutes a form of limited restriction.

This article is very much a “first impression” view of the Bill. Much of the material and commentary is gathered from earlier writings I have produced on the subject as well as from other sources among them Ani O’Brien, “Thought Crimes” (Substack) — “Hear me out: Ban the hardware not the software”; the New Zealand Initiative; Privacy Commissioner Michael Webster; UNICEF Aotearoa (Susan Glasgow); Australia’s eSafety Commissioner three-month evaluation (July 2026); UK Ofcom/House of Lords material and reporting on the Online Safety Act; and US litigation (NetChoice; the Louisiana and Arkansas decisions).

Furthermore, this article (and indeed the Bill itself) will not be the final word.

The Bill has not yet had its First Reading and that is unlikely before Parliament rises. But Prime Minister Luxon and Erica Stanford were determined to push this ill-advised proposal ahead at pace, even although what it really amounts to is an announcement until the Bill has its First Reading. And it may even fall at that fence. If it makes it, Select Committee submissions and further commentary will accumulate quickly.

Hence the critique reflects the position as at the time of publication of this article.

What the Bill actually does

The Online Safety (Minimum Age and Child Safety Risk Assessment) Bill, introduced to Parliament on 24 August 2026 by Education Minister Erica Stanford, is a stand-alone statute built on two load-bearing duties.

The first (clause 11) requires operators of “age-restricted platforms” to take reasonable steps to stop New Zealanders under 16 from holding an account. The second (clause 14) requires those operators to produce an annual, written child safety risk assessment covering all under-18s who use the platform.

Behind these sit an enforcement apparatus of warnings, enforceable undertakings, corrective notices, tiered pecuniary penalties (up to the greater of NZ$40 million or 10% of global turnover), and, as a last resort, service restriction orders and access restriction orders that would conscript ISPs, app stores and ancillary providers into preventing access to the platform from New Zealand.

The regulator is the Secretary of Internal Affairs — the chief executive of the Department of Internal Affairs (DIA). More on this disturbing aspect later.

Much of the drafting is careful.

It regulates the account, not the child, so no penalty falls on minors or parents.

It explicitly forbids treating manual date-of-birth entry as a “reasonable step”.

It goes beyond the Privacy Act by requiring destruction of age-assurance data.

The Bill is also more sophisticated than the “ban” it is marketed as. As I have argued on earlier occasions about similar proposals, this is a set of managed restrictions on account-holding, not a prohibition on children seeing content. Publicly available material remains reachable.

But the care in the drafting cannot rescue the concept.

The Bill imports a policy model that has already been trialled next door in Australia and in Britain, and the trials are in.

What follows is the case against it — a case now supported by a striking amount of hard evidence rather than speculation — followed by the specific problem of handing the whole scheme to the DIA.

The central flaw: a “targeted” measure that touches everyone

The Bill’s rhetorical appeal rests on the idea that it targets under-16s. Its mechanism does not.

To reliably prevent a 15-year-old from holding an account, a platform must satisfy itself about the age of every account-holder — which in practice means age-assuring the entire adult population as well.

Privacy Commissioner Michael Webster made the point bluntly when the policy was first floated. Keeping under-16s out means everyone over 16 has to prove they are over 16. The New Zealand Initiative put it the same way — everyone will have to demonstrate they are not under sixteen, including you.

This is the paradox the Bill never resolves, and it is not a drafting quibble but the whole problem.

Clause 11 forbids the “cheap check” (a manual date of birth entry) and forbids relying solely on formal ID or a digital identity service, which forces platforms toward either document upload, facial age-estimation, or “age inference” from behavioural and device signals.

Keep reading

AG Blanche’s Warning Points Straight at Age Verification Checks

The US Department of Justice (DOJ) has managed to extract $400 million from TikTok, and this is not a story about the company being forced to change its ways – but pay up nonetheless.

The settlement, which means no admission of wrongdoing on the part of TikTok, will see the company pay $300 million now, and another $100 million once a prior consent decree is vacated.

That earlier decree came from a 2019 case, United States v. Musical.ly, an app that was later folded into TikTok. The current case, United States v. ByteDance, was filed in 2024 and is now dismissed with prejudice.

The original complaint accused ByteDance of violating the COPPA Rule by letting children slip past TikTok’s age gate and “knowingly creating accounts for children and collecting data from those children” without “verifiable parental consent.”

The 2019 consent decree also sought to ensure that the company would get “verifiable parental consent” before collecting personal information from children.

The settlement reached now requires TikTok to change absolutely nothing.

The DOJ explains this by saying that since the 2024 filing, TikTok “has undergone significant changes to its ownership, management, compliance functions, and privacy practices” and “implemented extensive measures designed to strengthen safeguards for younger users, improve age-related controls, and enhance parental oversight.”

Those changes “have materially advanced the public interests underlying the Department’s litigation and have strengthened protections for millions of American families,” the DOJ said.

And what is “verifiable parental consent” that’s the main aspect of the original complaint and the 2019 consent decree? That’s where things get interesting. COPPA doesn’t mandate any specific method, but lists several, which escalate quickly from a signed consent form, to a payment from a parent’s credit or debit card, to submitting a government-issued ID and matching it to a face scan, or being verified over video call.

In other words, proving that a parent has given consent tends to boil down to proving who everyone is.

Keep reading

Texas Locked a Foreign Company’s Domain Over Missing Digital ID Checks

In Travis County, Texas, a judge has frozen motherless.com, the .com domain of a foreign pornography operator, taking it down worldwide until it posts a $9.14 million bond and builds an age verification digital ID system to the state’s own specification.

Kick Online Entertainment is a foreign corporation, and the order admits so, which is the reason the writ went somewhere else. A state court cannot summon a company overseas, but it can order the American firm that keeps the registry of every .com name, and that registry is what makes a domain resolve at all.

We obtained a copy of the order for you here.

The case turns on HB 1181, Texas’s age-verification law for adult sites. That firm is Verisign, a nonparty to it, and Judge Maya Guerra Gamble signed the writ of attachment on June 4, 2026, filed four days later in State of Texas v Kick Online Entertainment.

The order directs Verisign to place motherless.com on “a registry lock, hold, or similar status until replevied by Defendant,” the legal term for the operator posting a bond to get its domain back.

The domain is frozen rather than taken, though the difference means little here. What Verisign actually applied on was serverHold plus server-level prohibitions on deleting, transferring and updating the name. A hold pulls motherless.com out of the .com zone file, so it resolves for nobody.

Kick must post a bond of $9,140,000, and that bond is “conditioned on Defendant’s implementation of age verification that conforms with Texas Civil Practice and Remedies code chapter 129B,” together with an affirmation that it will satisfy the civil penalties entered against it on September 30, 2024. A company outside the state’s reach is being made to both pay and obey a Texas statute before its property comes back. This is specific performance of a state law, pulled from a foreign operator by holding an asset hostage at the registry.

Among the court’s stated reasons the writ is “appropriate and justified” is the finding that “Defendant is not a resident of this state and is a foreign corporation,” which turns the state’s inability to reach a company into a ground for taking its property.

The order then pre-authorizes more of the same, closing with the line that “as many writs as the State deems necessary shall issue,” so the count of future seizures is set by the attorney general and not by a judge weighing each one. And Texas was excused from the security these writs normally demand, because the order says “the State of Texas is not required to post a bond prior to the issuance of the Writ of Attachment.”

The party taking the asset posts nothing. The party losing it posts $9.14 million.

Keep reading

Four Kids “Safety” Bills, Supporting Online Digital ID Agenda, Hit Senate Floor

The CHATBOT Act says that nothing in it shall be construed to require a company to “implement an age gating or age verification” system, or to “affirmatively collect any personal data with respect to the age of any individual that the covered entity is not already collecting in the normal course” of its business. The Kids Online Safety Act carries a version of the same promise, ruling out “the affirmative collection of any personal data with respect to the age of users” that a platform doesn’t already gather.

But now read the rest of the same bills…

Yesterday, the Senate Commerce, Science, and Transportation Committee sent four children’s online safety bills to the Senate floor, with parents who attribute the harm of their children to social media sitting right there in the room. KOSA went through on a unanimous voice vote. This obviously wasn’t a place for a debate. The Youth AI Privacy Act from Senator Ed Markey advanced. So did the CHATBOT Act from Senator Ted Cruz, with Senators Schatz, Curtis and Schiff as co-sponsors. Senator Tammy Duckworth’s bill makes four, and it orders the FTC and the Consumer Product Safety Commission to study AI-enabled toys, which turns on nothing a company has to know about a user. A fifth, the SCREEN Act, got a tally and no result, which we’ll come back to.

KOSA passed the Senate in 2024 by 91 to 3, but the House never took it up. KOSA’s “duty of care” is the provision that gets the attention. It requires platforms to “exercise reasonable care” in design features to prevent and mitigate a listed set of harms to minors, with the FTC enforcing, and the harms run from conditions with “clinically diagnosable symptoms” through patterns of use “that indicate compulsive” behavior to sexual exploitation. The House stripped it out. The Senate sponsors called that version dead on arrival.

Keep reading

Pritzker Signs Law Making Devices Report Every User’s Age Bracket to Apps

Illinois Gov. JB Pritzker has signed the Children’s Social Media Safety Act, a law that takes the age check off individual websites and builds it into the device.

We obtained a copy of the law for you here.

It gives the state a say in what time minors are allowed to receive notifications. It’s also similar to what California is up to and also to what some senators want to extend nationwide. Starting in 2028, House Bill 5511 requires internet-enabled devices, operating systems and app stores to ask for the primary user’s birth date or age during account setup. The device then tells websites, apps, and online services which bracket that user falls into, whether under 13, 13 to 15, 16 to 17, or 18 and older.

Covered services must use the bracket to set default protections for users under 18. Algorithmic feeds are off for minors without “verifiable parental consent,” and their feeds can show only content they search for, posts from accounts they follow, and direct messages.

Feed notifications are blocked between 10 p.m. and 7 a.m., precise location data is shielded, and minors need parental sign-off for what the bill calls “gifted currency” exchanges.

The governor’s office says the law reaches Instagram, TikTok, Facebook, Snapchat, X and gaming platforms like Roblox. Traditional news media, broadband providers, email services and learning management systems are exempt.

The age declaration happens once, at setup, and then follows the user everywhere. NetChoice testified that Section 10 “mandates that device manufacturers and operating system providers collect birth dates, ages and age bracket data from all users, and share that information with covered developers through digital signals.” All users include adults. An adult setting up a new phone in Illinois states an age so the operating system can vouch for it to any covered service, and the company that ships the operating system becomes the gatekeeper.

Lawmakers passed the bill unanimously and Pritzker made it one of his top priorities for the spring session. “Big social media companies have intentionally designed their platforms to keep kids online for as long as possible,” he said at the signing in Chicago. House sponsor Jennifer Gong-Gershowitz, D-Glenview, said attention spans are shrinking, depression rates are rising and kids are “sacrificing sleep to scroll long past when they should be asleep.”

Keep reading

Senate Bill Would Put Age Checks in Every US Operating System

A bipartisan bill just introduced would build an age check into the operating system of every phone and computer sold in America. 

The Digital Age Assurance Act of 2026, S. 5090, from Senators Andy Kim, Cynthia Lummis, Adam Schiff, and John Barrasso, takes California’s age-signaling law and makes it the national standard.

The bill was referred to the Senate Committee on Commerce, Science, and Transportation on July 22, 2026, and would take effect 18 months after enactment.

We finally obtained a copy of the bill text for you here.

With the proposals, an operating system cannot be used without an account, and the account requires the user to “indicate the date of birth and age of the user.” 

For now, the user gets to declare their own age. A “covered device” is any computer, mobile device or other general-purpose computing device capable of running an operating system, so the requirement reaches practically everything. 

This is also backdated and accounts that already exist when the law takes effect are included.

The operating provider may skip the prompt where it already knows the age of the user from some other obligation, including a purchase authorization.

When a declaration is made into one of four brackets, under 13, 13 to 15, 16, or 17+. The system broadcasts only the bracket, which the bill defines as “non-personally identifiable data derived from a user’s date of birth or age.”

Apps, app stores, and even browsers would have to have the ability to request that bracket and use it as “the primary indicator of a user’s age.” 

Some websites would be included in this too. A “covered internet website” is one already “required under Federal or State law to verify the age of a user,” so the website obligations attach only where a state or federal age-verification mandate already exists.

With the first use of the browser on a device, it would request a signal from the operating system, and then it hands that signal to covered website operators on request. But the bill does not say how. 

Under the proposals, a “browser provider” is anyone who “owns, maintains, or controls a browser for use on a covered device.” No size threshold is attached. A small maintainer with a few thousand users would carry the same obligation as a big tech platform like Google.

Anyone under 17, which is the bill’s definition of a “child,” has to “link their account to the account of a parent or legal guardian.” The only exception is for emancipated minors. There’s no trusted adult option that can override this. A 16-year-old in an abusive household, or one researching a parent’s conduct, has no route that does not run through the person they need distance from. 

Keep reading

Texas Orders Discord to Run UK-Style Age Checks for State Users

A Texas court has ordered Discord to turn on the age-verification system it built for the United Kingdom’s Online Safety Act for every user in the state. Britain’s age-check regime has reached America by court order, and opening or keeping a Discord account in Texas can now mean a face scan or a government ID.

The agreed temporary injunction, signed by a Collin County judge, gives Discord 90 days to extend its age-assurance and default settings to Texas.

We obtained a copy of the temporary injunction for you here.

The company can still ask the court for more time if it shows the deadline is not feasible. Discord must serve the Texas Attorney General’s Office a confidential progress report every 30 days until it complies, and the order binds the company until final judgment, enforceable by contempt. The order lets Discord identify Texas users from data it already holds rather than gather new categories of personal information.

Today a Texan opens an account with an email address and a self-reported birthday, nothing more. The injunction imports that system instead. By Discord’s own published account, more than 90 percent of users are never asked to confirm their age, facial age estimation runs on the user’s own phone, and identity documents go to a third-party vendor rather than to Discord. The reassurance holds only for the users the system never questions. For everyone else, the account now comes with a face scan or a government ID handed to an outside company.

Under the order, Discord must route messages from strangers into a separate request inbox and block sensitive content for Texas teens unless it confirms the user is an adult. It must also close adult-only spaces to anyone it has not age-assured, according to the attorney general’s office. The state says these are the protections Discord already gives British children under the Online Safety Act and withheld from Texas.

Texas’s expert told the court that extending Discord’s existing safety features to the state was “just a matter of turning it on for Texas.” Discord runs the age-assurance system in the UK, Australia, and Brazil, its witnesses testified. In Texas the company still relies on a self-reported birthday at signup, a fact it did not dispute for the order.

Discord announced in February 2026 that it would roll its protections out worldwide, with the US launch only weeks away. Then it pulled back, telling the public the rollout would wait until the second half of 2026.

Attorney General Ken Paxton called the ruling a historic victory. “Discord built a platform where adult predators could hunt Texas children, then looked parents in the eye and told them it was safe,” he said in a statement. His office says Discord submitted 489,782 reports of suspected child sexual exploitation to the National Center for Missing & Exploited Children in 2025, more than 1,300 a day. Under cross-examination, Discord’s lawyers drew out that those reports largely amount to the company flagging crimes it finds on its own platform and passing them to the center.

New Jersey sued before Texas did, and Nevada, Indiana, and Arkansas have taken their own legal action. Texas filed on May 22, 2026, and won a restraining order within weeks. The case heads to a trial on the merits set for June 2027, where the state will seek civil penalties under the Deceptive Trade Practices Act, which can reach $10,000 per violation.

Keep reading