Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

EU age verification app not planning desktop support

github.com

Post reply on HN
Print view View original

161–170 of 437 posts

Re: EU age verification app not planning desktop support

#161

Post by nozzlegear »

ktosobcy wrote: post #147
nozzlegear wrote: post #93

Earlier quoted context omitted.

Smartphones are a lot more portable than desktop PCs or even laptops. Unless you enter everyone's home to take an inventory of their devices, it stands to reason that you're going to see more smartphones than anything else by just looking around.

[flagged]

> Please get off of your high-horse and actually try to interact with wider world and not the IT bubble :)

That seems pretty rude and uncalled for, why would you say that to me? Do you think that I don't have friends outside of the "IT bubble" myself, or that I don't have my own spouse who is a non-tech person?

Re: EU age verification app not planning desktop support

#162

Post by agf »

tarsinge wrote: post #127
logifail wrote: post #112

Earlier quoted context omitted.

> you can't run your bank's app I can log in to my bank account using my desktop PC > government eID apps I can sign into government websites using my desktop PC and its smart card reader and my government-issued eID smartcard. No smartphone needed.

For now, there is an increasing number of banks and government websites that are broken if you are not using Chrome or full on requires it.

This has been true since it stopped being true for Internet Explorer. I've not noticed any significant change over time. I have been using Firefox for over 20 years.

Re: EU age verification app not planning desktop support

#163

Post by Retric »

okanat wrote: post #129
logifail wrote: post #112

Earlier quoted context omitted.

> you can't run your bank's app I can log in to my bank account using my desktop PC > government eID apps I can sign into government websites using my desktop PC and its smart card reader and my government-issued eID smartcard. No smartphone needed.

Not in EU. Many banks mandate you either have an iPhone or Google approved Android as 2FA. Those fucking idiots have killed their own competition options.

That’s what competition is for. You can still swap banks over such nonsense.

Re: EU age verification app not planning desktop support

#164

Post by f_devd »

I've posted this as a response but I'll post it again since it seems like a lot of people are confused about the project:

This project is not THE digital wallet, it is an early prototype of the wallet (which can be criticized for what it is, but the issue is somewhat orthogonal).

The actual infrastructure is not based on attenstation, if you read the guidelines (or the readme) they actually want to implement a double-blind approach with ZKPs, which imo is significantly better than a challenge-response pub key system in term of privacy as some suggested. And allows for cross-platform (and in theory hardware) support.

If you're not familiar this would mean the verifier doesn't learn anything except a statement about attributes (age, license, etc); and the EU doesn't learn what attributes have been tried to verify or by who.

Re: EU age verification app not planning desktop support

#165

Post by skybrian »

They point out that some other service could do it:

> It should also be noted that this project is an example of a solution that is considered to meet certain requirements of the DSA, regarding the protection of minors. It does not prevent the use of other solutions that also meet those requirements.

Is anyone building that service?

Re: EU age verification app not planning desktop support

#166

Post by zb3 »

jwally wrote: post #122

Here's my crack at a good-enough solution for the U.S. It doesn't have a ton of granularity - but the concept is shovel ready now, dirt cheap, and privacy preserving. Video Demo: https://www.youtube.com/watch?v=MmcUJ5u65Q0 Actual Demo: https://app.hornpub.click How it works: 1) Go to app.horpub.click 2) Create an ephemeral passkey 3) Extract its public-key and id (this binds the credential you're creating to your dev…

But the bank and the horn content provider could collude and that would let the bank know that you're watching horn (shame, shame!).

The ZKP approach aims to prevent this attack method.

Re: EU age verification app not planning desktop support

#167

Post by wwweston »

bigstrat2003 wrote: post #134
mariusor wrote: post #104

Earlier quoted context omitted.

But as long as there are still people using desktop computers, removing access from them is an overreach and makes these ideas totally undemocratic. I am frankly baffled that an organization having the principles and know-how of the EU can even think of gating access to information with something so slipshod. The only eventuality where this is acceptable is when desktop computers won't even be gated, and then if anyo…

> I am frankly baffled that an organization having the principles and know-how of the EU can even think of gating access to information with something so slipshod. That doesn't surprise me at all. Principles in a government body don't exist. They are all crooks.

“They are all crooks” is the motto of another kind of personal corruption: the kind where people abdicate any responsibility to detail or distinction for the sheer indulgence of moral posture without any of the work.

Every time someone says “they’re all crooks” they are the enablers of crooks. The crooks couldn’t do it without people like that.

Re: EU age verification app not planning desktop support

#168

Post by NooneAtAll3 »

f_devd wrote: post #164

I've posted this as a response but I'll post it again since it seems like a lot of people are confused about the project: This project is not THE digital wallet, it is an early prototype of the wallet (which can be criticized for what it is, but the issue is somewhat orthogonal). The actual infrastructure is not based on attenstation, if you read the guidelines (or the readme) they actually want to implement a double…

> This project is not THE digital wallet, it is the wallet

...what?

Re: EU age verification app not planning desktop support

#169

Post by vaylian »

f_devd wrote: post #164

I've posted this as a response but I'll post it again since it seems like a lot of people are confused about the project: This project is not THE digital wallet, it is an early prototype of the wallet (which can be criticized for what it is, but the issue is somewhat orthogonal). The actual infrastructure is not based on attenstation, if you read the guidelines (or the readme) they actually want to implement a double…

Thanks for chiming in! Is there some documentation on the Zero-Knowledge-Proof, that this app is supposed to use?

Re: EU age verification app not planning desktop support

#170

Post by hellojesus »

Aaargh20318 wrote: post #128
hellojesus wrote: post #57

Earlier quoted context omitted.

What if you don't have a phone? Or what if your phone runs a custom rom and can't pass google's attlestation?

Then you can't use this method of identification, just like you can't use it now. Surely it won't be the only way to identify yourself online. If this provides a frictionless way to do this for 95% of people then it's already a huge win. Don't let perfect be the enemy of good.

Why can't we continue with an open web standard? We should have complete interoperability regardless of whether I'm using a google smartphone or a custom os I wrote in my garage or bsd or nixos. That is the entire point of web standards: to create the ability to communicate with one-another regardless of system design, so long as standards are properly implemented.

This is a general computing crisis.

Post reply on HN