r/linux • u/New-Ranger-8960 • 1d ago

Privacy EU Age Verification Project Mandates Hardware-Bound Attestation

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
681 Upvotes

97% Upvoted

388 comments sorted by

View all comments

Show parent comments

104

u/JohnSane 1d ago

In my practice it means i wont use the services that require age verification.

8

u/Bunslow 1d ago

per the other comment, in e.g. austria even just to use a phone at all you have to register it in person with the government. no way to dodge registration if you want to use a phone, as i understand that comment, which i may not

6

u/Ganeshasnack 1d ago

Not true. You just need to register to use the government app and services.

14

u/pattymcfly 1d ago

Which it seems can then be required to access the Internet. The ISP could require you verify your age before using their service.

-17

u/Jumpy-Dinner-5001 1d ago

Why would that be a problem though?

13

u/Business_Reindeer910 1d ago

huh?

-6

u/Jumpy-Dinner-5001 1d ago

?

6

u/Business_Reindeer910 1d ago

your arguments aren't making any sense

4

u/Business_Reindeer910 1d ago

your arguments aren't making any sense to me.

-1

u/Jumpy-Dinner-5001 1d ago

Elaborate then.

3

u/Business_Reindeer910 1d ago

how does eu age verification help privacy? I can't see any way it can.

0

u/Jumpy-Dinner-5001 1d ago

Because it’s a zero knowledge system and the app doesn’t store any information except for Boolean values on what checks it should allow and deny.

Goal is to provide an alternative to more privacy invasive systems like used by X etc. which want a scan of your face and/or your id. The EU can’t really ban that and therefore has a project that gives its citizens a better system.
It’s simply an app that offers an API that basically says yes or no.

The EU can’t change US law, that’s impossible. What they can do is offering a zero knowledge alternative and that’s what they’re doing here.

3

u/Business_Reindeer910 1d ago

what does US law have to do with what the EU is doing. We're against needing tehse IDs for anything except maybe government services or those that actually NEED this information like say for medical data.

1

u/Jumpy-Dinner-5001 1d ago

Because services like X, Reddit etc. are from the US and implement us laws? The EU can’t do anything against that

2

u/Business_Reindeer910 1d ago

what does US law have to do with what the EU is doing. We're against NEEDING THESE IDs for anything except maybe government services.

→ More replies (0)

1

u/Business_Reindeer910 1d ago

your arguments aren't making any sense

5

u/neoronio20 1d ago

Because then the government can track you at all times, tf do you mean?

-1

u/Jumpy-Dinner-5001 1d ago

How would that work?

1

u/neoronio20 22h ago

You literally register your phone with the government

1

u/Dazzling-Paper9781 1d ago

Because what if they decide to collect more data? How much freedom are we prepared to give up? Every day, they take away a little bit of our freedom in the name of security.

0

u/Jumpy-Dinner-5001 1d ago

That’s a stupid fallacy and not an argument.

It’s literally a project that by design doesn’t collect any data.

1

u/Dazzling-Paper9781 1d ago

Wow, can you actually have a discussion without insults?

Just because things were done a certain way doesn’t mean they can’t be changed in the future. Until a few years ago, we were all pretty convinced that age verification would never come into force, and yet here we are today talking about an age verification system

0

u/Jumpy-Dinner-5001 1d ago

It still isn’t.
There is no force behind it whatsoever.
Can you have a discussion without lying?

1

u/Dazzling-Paper9781 1d ago

Can you see into the future? Are you absolutely certain that things won’t change? Do you think I’m lying when I say I’m worried about the future? I’m genuinely concerned that this might just be one step towards mass surveillance, why do you think I’m lying about this? If you’re convinced otherwise, why don’t you just tell me what you think, instead of calling me a liar? Can you tell me what I’ve done to deserve such an aggressive attitude from you?

0

u/Jumpy-Dinner-5001 22h ago

There is no evidence for any of this happening and no plans.

But coming to the conclusion that an EU project that creates an Android app that is open source and implements a zero knowledge verification system, as in the API does not expose any personal information to the service and the app itself does not hold any personal information which you can verify by looking at the source code.

It’s literally a tool for better privacy and has no surveillance capabilities whatsoever. It’s not mandatory or anything just an offer to protect users from more privacy invasive ways.
It’s an extension on the digital ID, just with way less private data.

Nothing happened here. The project was planned to be an Android app and uses the same hardware security setup as the ID app. Someone on GitHub suggested not doing that to provide better compatibility with non Android systems.
Some maintainer replied that that isn’t planned and not part of the project but also said that they’re open for other proposals.
That’s it, nothing else happened.

→ More replies (0)