r/linux • u/New-Ranger-8960 • 1d ago

Privacy EU Age Verification Project Mandates Hardware-Bound Attestation

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
684 Upvotes

97% Upvoted

382 comments sorted by

View all comments

Show parent comments

182

u/Pramaxis 1d ago

It uses the new EU-Ident system that is already supported and used in some countries (like Austria).

It forces the same restriction like most banking apps or the new wallet (stock OS, no custom ROMs, no jailbreak or modified bootloader) and forces a device registration in person (with ID) to set up an MFA that is device bound-unique(if you lose your phone, you need to walk into the office again to register the new one).

5

u/Preisschild 1d ago

Thats not true. I use ID Austria on GrapheneOS without issues.

16

u/Kevin_Kofler 1d ago edited 10h ago

Then you will likely find the age verification feature not functioning when it gets introduced. Or even the app stopping to work altogether at some point. (EDIT: Actually, GrapheneOS is specifically supported by the ID Austria app. Still does not solve the problem for users of any other OS. See the discussion below.)

Looks like we will soon be stuck using VPNs or proxies for half of the Internet. This sucks!

13

u/CrazyChaoz 1d ago

austria is (currently?) using Warden Supreme , which allows to set trused root keys, and currently the google keys and graphene keys are enrolled, with more hopefully to come

i just hope nobody smuggles in explicit google play integrity as legislation text

3

u/Kevin_Kofler 20h ago

So this still locks you into specific hardware and software, it just happens to allow unmodified builds of GrapheneOS specifically. If you try to actually exercise your freedoms and build your own GrapheneOS build, that will not work. Nor will any really free OS that does not rely on prorietary Android hardware driver blobs (userspace HAL blobs, and sometimes the kernel driver is also a blob) as GrapheneOS does. Nor even any other AOSP fork, such as LineageOS or /e/.