Live data from Hacker News

UK government's battle with Apple over EU citizens app

bbc.co.uk

21–30 of 48 posts

Re: UK government's battle with Apple over EU citizens app

#21
post #9
post #3

So what about people with no smartphone? They won't be allowed to stay in the UK? ;)

From the article: > The Home Office has also [planned] to set up computer terminals at 56 local libraries around the UK to help those without smartphones, or without the necessary digital skills, to apply to stay in the UK.

56 terminals for ~3 million people? Even if we're only talking about 5% of those who don't have a suitable smartphone this is really inadequate.

Re: UK government's battle with Apple over EU citizens app

#22
post #2

Any idea why Apple doesn't allow use of NFC? It's been in devices for ages, I'm surprise to hear it's not available to developers. Given Apple reviews all apps anyway, and can restrict what it's used for any way they like, I can't imagine why they wouldn't allow apps to use it.

I'm actually very suprised by this article because in iOS 11, over a year old now, they did open up NFC to developers: https://developer.apple.com/documentation/corenfc . The problem could be that they require a different data format then the NFC Data Exchange Format (NDEF) as that is the only format that CoreNFC supports.

Communicating with a passport requires two-way communication for authentication and data transfer; they're not simple NFC tags.

Re: UK government's battle with Apple over EU citizens app

#23

iOS definitely supports NFC for third party apps. Here’s the documentation: https://developer.apple.com/documentation/corenfc I just played with the Yubico iOS SDK just the other day and it supports my Yubikey 5 flawlessly.

They support a very limited form of NFC, which will most definitely not allow you to read a passport.

Re: UK government's battle with Apple over EU citizens app

#24
post #2

Any idea why Apple doesn't allow use of NFC? It's been in devices for ages, I'm surprise to hear it's not available to developers. Given Apple reviews all apps anyway, and can restrict what it's used for any way they like, I can't imagine why they wouldn't allow apps to use it.

> Any idea why Apple doesn't allow use of NFC?

iOS apps can access NFC capablities on devices with that have appropriate hardware support, but from what I understand the CoreNFC API has some limitations.

For example, it doesn't provide a way to read an RFID'c unique ID without using a private API that would disqualify an app from being published on the app store. There's some information about this at [1] and [2]. CoreAPI can read NDEF tags, but they don't expose the UID.

Perhaps the Home Office's app needs the UID of the passport's embedded RFID? I don't know why they might want this, or why Apple restricts the ability to read it. Privacy concerns?

[1] https://www.taptrack.com/article/blog/core-nfc-2/

[2] https://stackoverflow.com/questions/51822226/corenfc-not-rea...

Re: UK government's battle with Apple over EU citizens app

#25

So this is a smartphone app because they want to use the NFC in the smartphone to scan the passport. Does anyone know how the NFC in a passport works? If it just communicates the passport number, then it seems like they could allow a fallback where the user types in the passport number, without any loss of security. (Because if that is how it works, all you're really proving is knowledge of the passport number, not p…

The passport is a standard NFC smart card, just like your credit card. Internally it can do crypto, which means it’s not just about a passport number but cryptographically proving the person is in possession of their passport.

Re: UK government's battle with Apple over EU citizens app

#26

So this is a smartphone app because they want to use the NFC in the smartphone to scan the passport. Does anyone know how the NFC in a passport works? If it just communicates the passport number, then it seems like they could allow a fallback where the user types in the passport number, without any loss of security. (Because if that is how it works, all you're really proving is knowledge of the passport number, not p…

It's signed and encrypted: https://en.wikipedia.org/wiki/Biometric_passport

Re: UK government's battle with Apple over EU citizens app

#27
post #12

> The Home Office has also signed a £91m contract with French company Sopra Steria to set up computer terminals at 56 local libraries Just £1.625 million per library? Does that seem a crazy amount to anyone else?

Also, local to who ? There aren't 56 points in the UK such that everyone has a local point for any reasonable definition of "local".

Local as in administered locally and not nationally.

Its astounding you didn't infer that.

Re: UK government's battle with Apple over EU citizens app

#28
post #2

Any idea why Apple doesn't allow use of NFC? It's been in devices for ages, I'm surprise to hear it's not available to developers. Given Apple reviews all apps anyway, and can restrict what it's used for any way they like, I can't imagine why they wouldn't allow apps to use it.

> Any idea why Apple doesn't allow use of NFC? iOS apps can access NFC capablities on devices with that have appropriate hardware support, but from what I understand the CoreNFC API has some limitations. For example, it doesn't provide a way to read an RFID'c unique ID without using a private API that would disqualify an app from being published on the app store. There's some information about this at [1] and [2]. Co…

You don’t just need the UID (and by the way, passports don’t have one).

You need to do a proper cryptographic handshake with the passport, something impossible with the current SDK. You need to be able to send raw “APDUs” (commands) to the smart card/passport.

Re: UK government's battle with Apple over EU citizens app

#29
Relatedly on twitter: https://twitter.com/JakubKrupa/status/1057665110976663552 downthread

"The most difficult part of the process - confirmation of ID - was not being done through an automated process: applicants didn't have to use the controversial app to scan their passports. Of those who voluntarily decided to use it 30% FAILED."

And as various people have pointed out, unless a deal appears in a really short timeframe, all 3m EU nationals living in the UK will have to go through this process in order to continue working or renting in the UK. https://www.bbc.co.uk/news/uk-politics-46035919

Re: UK government's battle with Apple over EU citizens app

#30
post #12

> The Home Office has also signed a £91m contract with French company Sopra Steria to set up computer terminals at 56 local libraries Just £1.625 million per library? Does that seem a crazy amount to anyone else?

I does seem crazy, but apparently it includes the application process as well. In general not a lot of people tend to care about this kind of thing. Governments often aren't empowered to do it, the large tech companies don't care, the idealist are busy copying the large tech companies and the hobbyist are busy with their own hobbies. Left are large consulting companies that can provide custom solutions and will charge as such.
Post reply on HN