Live data from Hacker News

EU Age Verification Project Mandates Hardware-Bound Attestation

linuxiac.com

201–207 of 207 posts

Re: EU Age Verification Project Mandates Hardware-Bound Attestation

#201

Earlier quoted context omitted.

Is this sarcasm?

I was recommended by my psychiatrist to go get tested for autism recently. I suppose I should take that more seriously than I first did...

To a first approximation, everyone who visits HN is autistic.

Re: EU Age Verification Project Mandates Hardware-Bound Attestation

#202
post #134

Earlier quoted context omitted.

> Having a physical card fallback here is a necessity and nothing in these proposals shows that the physical card ID is going away. It doesn't have to go away. Once the capability is there, they can and probably will simply make it mandatory to even so much as get an internet connection from your ISP. No unbreakable ID chip? No internet for you. The "fallback card" is exactly what added the necessary friction that pr…

In most EU states you already need to provide ID to establish internet service, so what are you on about man?

ID is required only for the person requesting it to be installed (or SIM card subscriber), not for everyone using it.

Re: EU Age Verification Project Mandates Hardware-Bound Attestation

#204
post #18

All this ostensibly to keep teenage boys from watching Pornhub (when parental controls already exist). The real reason, of course, is to force people to connect strong real-life identifiers to online activity. Mobile first, then Windows. Then Linux is too weak to oppose on its own, and will adapt or die.

"Mobile first, then Windows. Then Linux is too weak to oppose on its own, and will adapt or die." How about NetBSD, FreeBSD, OpenBSD, FreeDOS, Plan9 What's the timeline on this outcome Anyone willing to place a bet on a prediction market "Let me be direct about this: the likelihood of any legislature specifically targeting FreeBSD or OpenBSD with age verification mandates is close to zero." https://freebsd.consulting…

I bought a computer where a secure boot module was optional

I saved money by opting out of secure boot

If I needed it I could add it later

But I boot NetBSD from USB stick to RAM-based filesystem (e.g., mfs ,tmpfs), there is no internal HDD or SSD

I do not boot with "secure boot enabled" because the computer does not have a secure boot TPM

Re: EU Age Verification Project Mandates Hardware-Bound Attestation

#205
post #5

> a maintainer confirmed that hardware-bound attestation is a mandatory architectural requirement Hardware-bound is not a problem, limiting that to only iPhones and some Android phones is. Plenty of hardware can keep a key safe and it doesn't need Apple's or Google's blessing.

I still contest that I should be able to solder together a basic computer in my garage and communicate with the internet so long as I follow the communication standards. There is never a reason to outlaw general purpose computing.

A lot of things get deprecated on the internet. You can shout in SSL and nobody will answer back.

Tying any solution to specific companies is the major problem. Because even if the rest of the age verification scheme is well thought out in the user's interest, tying it to Apple and Google not only forces people's dependency on foreign private companies, it also invalidates any pretense of privacy.

Re: EU Age Verification Project Mandates Hardware-Bound Attestation

#206
post #127

Earlier quoted context omitted.

Bad actors will stay untraceable. What specific generalized problem would you like to be solved that you advocate for such a generalized solution?

implement reasonable measures to force all users to be identifiable by a government request and then block all untraceable accounts.

Block from what exactly?

Bad actors can and will steal identifies.

Re: EU Age Verification Project Mandates Hardware-Bound Attestation

#207

The downvoted comments here are very interesting, and it really shows a divide in beliefs here. I fear that there's no reconciling this, and in the end we'll need two internets: The EUternet and the USternet.

The US is moving in the same general direction, even if they take slightly different measures. The universal tracking of everyone is something all these governments can suddenly agree on. If after this is enacted the firewalls aren't perfect, the internet will probably instead splinter into the Westernet and the everywhere-else-net for the rest of the countries that are too disorganized or uncaring to join in on the…

Governments are not unified bodies, and attempts to introduce thought control on the internet have failed in the US, but easily passed in the UK. Illinois has recently passed a toothless age verification law and it's being hotly debated, but the UK is arresting people over facebook posts.
Post reply on HN