151–160 of 437 posts
Erm... FUT? - this project is just one implementation (POC if you want) - they simply state the current scope of the project For anyone sane managing projects it makes sense to correctly allocate resources that would cover the most people. and to all those whining butthurt individuals here - reality check is that it's way more probable that someone has and uses a smartphone than a computer. go out of your tiny bubble…
This post is misleading. The project is just an example. It does not mean there will not be support for other ways of verification.
Earlier quoted context omitted.
What if you don't have a phone? Or what if your phone runs a custom rom and can't pass google's attlestation?
Then you can't use this method of identification, just like you can't use it now. Surely it won't be the only way to identify yourself online. If this provides a frictionless way to do this for 95% of people then it's already a huge win. Don't let perfect be the enemy of good.
The target, which are the children who access "forbidden" websites without authorization is likely to be lower than amount of people who won't be able to access due to those narrow specs.
This is not an accident. This is intent. Look at the arrests for social media posts in the UK and Germany.
Here's my crack at a good-enough solution for the U.S. It doesn't have a ton of granularity - but the concept is shovel ready now, dirt cheap, and privacy preserving. Video Demo: https://www.youtube.com/watch?v=MmcUJ5u65Q0 Actual Demo: https://app.hornpub.click How it works: 1) Go to app.horpub.click 2) Create an ephemeral passkey 3) Extract its public-key and id (this binds the credential you're creating to your dev…
What's crazy to me is why they didn't go for that kind of implementation. This works well, ensures privacy, can be audited easily, and doesn't need a f*cking app on my phone.
If you're not familiar this would mean the verifier doesn't learns anything except a statement about attributes (age, license, etc); and the EU doesn't learn what attributes have been tried to verify or by who.
Earlier quoted context omitted.
This read more like "we thought pc was a dead relic of the past" sadly
To me it reads that, since many people already believe this is more about tracking than safety, they are focusing on a device which is the perfect surveillance system, and which conveniently already accounts for 7+ hours of many peoples daily computer/internet interaction. A desktop computer doesn't necessarily have a microphone or camera, and doesn't necessarily have to be connected to the internet. I'd wager most c…
This is strange, in Italy our eID system can be used from the desktop with a (recent) smart card reader
this was the case in portugal too, although i don't know if it still is since gov apps have been pushed to the apple and google stores. edit: it should still work according to this https://www.autenticacao.gov.pt/cartao-cidadao/autenticacao
I believe it's still possible to use the physical card with a reader for many things.
I think some services still don't work with the CMD. Recently, I had to ask for changes to my car's document, and it seems it's only possible with the card itself. (https://www.automovelonline.mj.pt/AutoOnlineProd/)
Earlier quoted context omitted.
The insane question here is, why would the EU mandate hardware attestation controlled by two private American companies in order to access services? That seems completely contrary to the spirit of EU laws and regulations, which tend to be about protecting the consumer, preventing monopolies, ensuring people can generally live their lives where all things that are mandatory are owned and ran by the state and foster a…
The app this discussion is about is a reference implementation that is part of a long-term process for building a digital identity app. Specifically, this discussion is about the age verification part of the app, which is the first part expected to be finished but is also only a small part of a much wider ideal. Europe's dependence on American tech is a major pain point but realistically, there are only two smartphon…