Viewing profile — hiciu

FWIW, for me docker compose works just fine with podman. I am not sure what kind of additional configuration is needed these days, make sure you are running podman with the socket …

Whats your source for the database sharing claim? The way I understand it is more like tls certs, with each country managing their own root cert.

I'm not affiliated with the project, just curious. So there's demo app in the eu-digital-identity-wallet/av-app-android-wallet-ui github repo, I believe this is what's being tested…

> just put Excel inside Winboat or something, but they won't have it Just curious, is it about different tools / workflow / the new thing to learn (and those are valid reasons!) or…

Besides main issue here, and the owners account being possibly compromised as well, there's like 170+ low quality spam comments in there. I would expect better spam detection syste…

That's true, but it never really was your system, right? It's government issued app on a government approved device.

I totally agree that one of the biggest vulnerabilities in EU digital ID scheme are US corporations :).

> someone can set up a token-as-a-service to sell tokens on the black market They can! Singing requires either PIN or finger on the fingerprint, and signed "proof" is valid for lik…

It is literally TLS in a trench coat with some json sprinkled on top. Where I think we are not in agreement the question of "who to trust" and "for what purposes". Are you going to…

Yes, something in the document is tied to my ID. There's my name in there for example :). I don't have to share that information, because what government signed is a uniquely salte…

That's where the google play integrity / attestation comes into the effect. In theory you cannot export your private key from the device (from the secure element), so for each $2 s…

Yes we are still talking about attestation from the government for the specific privilege part. You get your document with fields like "can drive", "is over 18" and so on. It's val…

there is no "route the request through the government system every time you use your ID". you get your sd-jwt document signed once and you reuse it for like 30 days or so.

> issue your own tokens I mean, you can. It's like with TLS certificates. The standard is there. The code is there. You can issue your own. The question is, who will trust you?

> A true zero knowledge ID check with blind signatures That is not true and "true zero knowledge ID check" + "age verification" with blind signatures is what's being implemented by…

> EU's planned system requires highly invasive age verification EUDI wallets are connected to your government issued ID. There is no "highly invasive age verification". We are lite…

OK so those processes are launched not by systemd, but by dbus itself. There's probably a /usr/share/dbus-1/services/org.freedesktop.IBus.service file in your system and if dbus se…

"let's allow any user process to modify my binaries" is not something to be proud of...

Could you please expand bit more about those processes that systemd spawns without units? Cgroups in Linux kernel, and systemd-cgls tool should let you trace every process to a sou…

this is exactly how gemini synthid works and how you are supposed to use it https://support.google.com/gemini/answer/16722517

Wow. Can you tell a Korean person from Chinese person? Polish name from a Czech one? Different cultures, different languages, it's obvious to the locals.

It's PHP. Handling numbers in PHP is complicated enough that a reasonable person would not trust it by default. https://www.php.net/manual/en/language.types.numeric-strings...

It looks the same, but for some reason Claude Code is much more capable. Codex got lost in my source code and hallucinated bunch of stuff, Claude on the same task just went to town…

Manjaro users used to come to the Arch forums for support. In one case user came with some kind of a kernel issue and when we started to debug it someone noticed that the kernel ve…

> You have to guarantee that after reboot you rollback any partial package operations. In both scenarios, yes. This is what dpkg database is for, it keeps info about state of each …