Live data from Hacker News

Source code for Dutch DigiD app released under Dutch Open Government Act

github.com

41–50 of 161 posts

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#41

In order to verify your ID with the app your phone must have NFC support to scan the passport/id, and on the screen where you do the verification it says: if your phone doesnt have support find a friend with a phone that supports it, I kid you not.. edit, found it in the code: https://github.com/MinBZK/woo-besluit-broncode-digid-app/blo...

For what it’s worth, what you describe is optional, there are other ways to verify if you do not have such a device.

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#42
post #39

I find the DigiD app to be one of the most annoying implementations of 2FA out there. You have to unlock the app with a pin code, then enter an app-generated code on the site, then scan a QR with the app, and then grant permission to login to that site. If you compare that to 2FA for Office 365 for example, where you just have a push notification where you press a button to allow, then you can't help but think that s…

It's slightly easier on-device (where the app runs), still try opening your government messages inbox, that takes 5 taps/screens/faceID and a code. It always works though, and one does not use it very often.

I do appreciate that they keep is so secure (or perhaps I should say, not logged in by default). It works well in general imho.

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#44
post #39

I find the DigiD app to be one of the most annoying implementations of 2FA out there. You have to unlock the app with a pin code, then enter an app-generated code on the site, then scan a QR with the app, and then grant permission to login to that site. If you compare that to 2FA for Office 365 for example, where you just have a push notification where you press a button to allow, then you can't help but think that s…

On mobile, you just use pin. So easy!

On desktop, you use pin, type code, then scan. I find the flow quite smooth.

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#45

Italy does the same: https://github.com/pagopa/io-app This is the official government app (you can get benefits, pay taxes, etc...), downloaded by 30+ million citizens, stack is React Native + Typescript

maybe EU countries could save a bundle and co-develop these apps. might also improve quality / ensure best practises are available to all etc.

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#46
post #39

I find the DigiD app to be one of the most annoying implementations of 2FA out there. You have to unlock the app with a pin code, then enter an app-generated code on the site, then scan a QR with the app, and then grant permission to login to that site. If you compare that to 2FA for Office 365 for example, where you just have a push notification where you press a button to allow, then you can't help but think that s…

If you leave the country without setting up SMS you can’t ever use 2FA. They claim to support adding foreign numbers, support people being abroad, support adding new DigiD accounts from abroad, but oh no you can’t just add a number. Not even by going to an office or doing a virtual interview. I would think this violates EU law on discrimination. If you live in the UK post-Brexit it’s now totally impossible, I believe (since you aren’t even allowed to make a new account).

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#47
post #26

In order to verify your ID with the app your phone must have NFC support to scan the passport/id, and on the screen where you do the verification it says: if your phone doesnt have support find a friend with a phone that supports it, I kid you not.. edit, found it in the code: https://github.com/MinBZK/woo-besluit-broncode-digid-app/blo...

Certainly better than in my country where you need to have a windows machine w/ a card reader to use the certificate from the ID card to login.

[deleted]

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#48

Italy does the same: https://github.com/pagopa/io-app This is the official government app (you can get benefits, pay taxes, etc...), downloaded by 30+ million citizens, stack is React Native + Typescript

Wow, looks pretty nice from the screenshots. Do you have experience using it? Does it work well/do what it claims? I recently moved to Spain, who has a digital identity system, but is a pretty disjointed attempt.

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#49

Question: can you modify, compile, and run that code and still have it work for the same uses?

It would seem so: https://github.com/MinBZK/woo-besluit-broncode-digid-app/blo... The interesting aspect of this is that it can be studied to write clients for platforms that are not officially supported -- currently, only Android and iOS are supported, but it'd be great to see a Linux client too. It's a big shame that history has been rewritten and heavily redacted though. Version control history often has a lot of…

I'm still hoping for practical iOS and Android emulators to appear at some point.

Re: Source code for Dutch DigiD app released under Dutch Open Government Act

#50
"...This code has been disclosed in response to a request under the Dutch Open Government Act ("Wet open Overheid")..."'

Sounds like it was not voluntary. Also not sure what kind of transparency is expected here, since there is no way to find if the source code published is the same used to build the app. Maybe decompilation is the way to go...

Post reply on HN