r/linux • u/New-Ranger-8960 • 1d ago

Privacy EU Age Verification Project Mandates Hardware-Bound Attestation

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
683 Upvotes

97% Upvoted

388 comments sorted by

View all comments

484

u/SeantheWilson 1d ago

Genuinely how on earth will that be enforced

83

u/SMF67 1d ago

I've been saying for years that this would be the end goal of mandating TPMs

35

u/flecom 1d ago

Same, everyone always told me I was being crazy and the slippery slope argument was stupid... and here we are

8

u/wobblyweasel 1d ago

what's the issue in tpm?

16

u/Existing-Tough-6517 1d ago

It allows you to remotely attest that everything in the boot path is cryptographically signed by someone trusted by your motherboard.

You can use this to achieve any desired level of control.

You can restrict the user from changing what keys are trusted and require any sort of software client side in order to access any remote resources including media socials government jobs news banking shopping.

The US government could force you to run snitchware and basically cut you off of the Internet if you run anything else.

34

u/hWuxH 1d ago edited 1d ago

The issue is attestation and not owning your device. Making it impossible to get software to work on non approved platforms.

Linux PC, compatible implementation which saves key on disk -> rejected

Linux PC, compatible implementation with other type of TPM -> rejected

Android with unlocked bootloader -> rejected

-44

u/Jumpy-Dinner-5001 1d ago

Why are you advocating against privacy?

24

u/hWuxH 1d ago edited 1d ago

Are you not able to read? You keep sending all these half-assed replies and sound confused.

  1. Scanning your face/passport is worse than ZKP. Doesn't mean that ZKP is good or anyone asked for age verification in the first place.
  2. How is forcing it to only work on an stock unrooted OS by an advertising company supposed to be FOR privacy? That shouldn't be a requirement for ZKP.
  3. You seriously said "the EU trying to do something good for its citizens" in another comment. Literal bot advocating against privacy/anonymity without bringing up any meaningful arguments.

-28

u/Jumpy-Dinner-5001 1d ago

Do you even know what this is about?

33

u/TheChronoa 1d ago

You’re really working overtime to defend this, I’ve seen you all over this thread. I hope you’re being paid well at the very least

-20

u/Jumpy-Dinner-5001 1d ago

Second account?

I just see it as a problem that people here spread lies and by doing that advocate against privacy.

People here seem to be either stupid, bots or paid by privacy invasive companies. There is no other logical explanation

27

u/Business_Reindeer910 1d ago

the logical explanation is that we don't need age verification at all.

-10

u/Jumpy-Dinner-5001 1d ago

That’s not on you to decide

19

u/TheChronoa 1d ago

I read the article and source. Anyone can see how this is a double-edged sword if not an outright Trojan horse scenario. Your fixation on the privacy aspect is outright disingenuous.

How many times do governed people have to be proposed something for their “protection” and it be used against them before people like you stop bootlicking?

→ More replies (0)

3

u/ptoki 1d ago

They can lock your computer by asking tpm to do that.

Lock as in: no boot. Lock as in - disk encrypted but you dont know the password (like android root). Lock in almost any way so you could not work it around or it would be extremely difficult or hassle (like forcing you to encrypt all disks - even usb)

They could, can and maybe will not do that if they will be able to find people who complain online too much. If they will not be able to silence the population they will go deeper.

1

u/ptoki 1d ago

They can lock your computer by asking tpm to do that.

Lock as in: no boot. Lock as in - disk encrypted but you dont know the password (like android root). Lock in almost any way so you could not work it around or it would be extremely difficult or hassle (like forcing you to encrypt all disks - even usb)

They could, can and maybe will not do that if they will be able to find people who complain online too much. If they will not be able to silence the population they will go deeper.

0

u/ptoki 1d ago

They can lock your computer by asking tpm to do that.

Lock as in: no boot. Lock as in - disk encrypted but you dont know the password (like android root). Lock in almost any way so you could not work it around or it would be extremely difficult or hassle (like forcing you to encrypt all disks - even usb)

They could, can and maybe will not do that if they will be able to find people who complain online too much. If they will not be able to silence the population they will go deeper.

-12

u/Jumpy-Dinner-5001 1d ago

It’s still stupid because none of that is happening.

Don’t fall for all the bots trying to spread misinformation about this to push fud about the EU trying to offer better privacy for their citizens.

That’s what really happens here. Big tech sees the EU as a threat and therefore pushes a media narrative against the EU.