An investigation by the TBOTE Project claims that age verification laws across Brazil, the UK, and the US are creating mandatory markets for biometric identity infrastructure that doubles as surveillance. Peter Thiel sits at the center of what the report calls the "Thiel Nexus": he co-founded Palantir, the surveillance analytics giant, while his Founders Fund led Persona's $150M Series C and co-led its $200M Series D. Persona is the identity verification company whose leaked source code reportedly contains 269 distinct verification checks ranging from document validation and biometric matching to liveness detection and database cross-references. The code also includes modules for filing reports to FinCEN and FINTRAC.
The technical findings are worth examining. A security researcher using the handle "Celeste" discovered 53 MB of unminified TypeScript on a public government endpoint. The exposed code allegedly includes government reporting capabilities and facial recognition powered by Paravision, which isn't listed on Persona's subprocessors page. The code also reportedly contained hardcoded AES keys and zero certificate pinning. Roblox embeds the full Persona SDK in a children's game with NFC passport reading, according to the investigation.
Meta spent $26.3 million lobbying for age verification legislation through the Digital Childhood Alliance, the report claims. The goal was shifting regulatory burdens from individual platforms to app stores like Apple and Google. The real concern here is whether child safety justifies building identity verification infrastructure that normalizes surveillance for automated internet transactions. This concern aligns with broader surveillance technology patterns similar to recent revelations about always-on AI glasses.
There's reason for skepticism though. Critics on Hacker News noted the research appears heavily AI-generated with logical gaps and some broken source links. The TBOTE Project itself acknowledges its repository is still being updated after infrastructure changes. Take the claims with appropriate caution until independent verification happens.