Live data from Hacker News

EU age verification app not planning desktop support

github.com

421–430 of 437 posts

Re: EU age verification app not planning desktop support

#421

Earlier quoted context omitted.

Of course-- there will be accommodations to start out with. Then, after the new system has become "just the way things work," the accommodations will be removed for security or efficiency or some other reason. Or maybe not. I've never lost a boarding pass, but if you lose one, you can get it re-issued somewhere, right?

The likely future is where you'll be given a USB-C charger to charge your phone. If you have no phone or is broken, it will be the equivalent to having a strongly damaged passport. No fly that day, get a new phone, fly on another date, just like if you needed a new passport. The phone will be your ID, passport, credit card and everything. But since it will be all backed up in Google/Apple/Microsoft cloud, maybe you'l…

I had a very worn passport. I got to check-in one time and as I handed my passport to the agent my photo fell out of the back page.

They still let me fly from UK to USA and back.

This was 1997. Wild times.

Re: EU age verification app not planning desktop support

#422
just a few thoughts:

1) so long as these age verification methods are for things at home, I think most people opposed to smartphones ("client devices" we have to pay for) will not be too inconvenienced. a few years ago, broker quit letting us use plastic code cards for 2FA and required we used an Android/iOS device, but I'm willing to tolerate having a single-purpose tablet in a drawer, though I'm still annoyed to essentially have a $100 undisclosed fee attached to service I have to pay every 3-4 years when they drop support for older versions of Android.

2) I've so far only been locked out of minor services like Anthropic by not having smartphone w/ mobile service, not because they require app use but because they ban VOIP numbers for registration. many businesses do charge me a little extra for not using a smartphone, but the cost is not too high, about on par with ignoring loyalty cards.

3) this cannot ever be required for something like onsite ID verification (e.g. at an airport) or I would be locked out of essential government processes. I'm willing to keep a device in a drawer, but will never carry a client device around with me.

4) this is not a problem exclusively for elderly grandma with satellite brick phones. I'm in my 30s with IT/developer background.

Re: EU age verification app not planning desktop support

#423

Earlier quoted context omitted.

How to make the normal person aware and interested in their own digital rights. Start a revolutionary, reactionary movement. Many people wonder how the current US president was elected. Regardless what your political stance is, it's good evidence that if you can recruit a huge number of followers in your agenda (and in the process, likely make nearly as many opponents), and have them repeat your "propaganda" as much…

Of course, to build a movement, you need a way to get people aware and interested in the first place...!

Tell everyone you know, tell them to do the same...

Re: EU age verification app not planning desktop support

#424

Earlier quoted context omitted.

What's so rude and uncalled for? It's just a statement without steeping to any offensive vocabulary. And it's kidna funny that you are offended by it while you outright dismissed my comment with your "all knowing": "Unless you enter everyone's home to take an inventory of their devices, it stands to reason that you're going to see more smartphones than anything else by just looking around." - wouldn't you say that wa…

> What's so rude and uncalled for? It's just a statement without steeping to any offensive vocabulary. Spare me your sophistry.

spare me your "snowflakery" :D

Re: EU age verification app not planning desktop support

#425

Earlier quoted context omitted.

> you can't run your bank's app I can log in to my bank account using my desktop PC > government eID apps I can sign into government websites using my desktop PC and its smart card reader and my government-issued eID smartcard. No smartphone needed.

Well in Sweden we can't. You already need bankid on your phone to log in on your PC. There used to be a bankid desktop app and dedicated hardware, but that's gone from many sites now

That I know of: Danske Bank, ICA Banken and Nordea give you some “calculator”-style device to generate codes and login. Danske calls it “kodbox”, Nordea “ID-dosa”. I got mine at account opening, and you need it to issue BankID for the first time.

Re: EU age verification app not planning desktop support

#426
post #65
post #53

Earlier quoted context omitted.

My EU country allows tapping the ID card on a NFC reader on PC for verification. No smartphone needed for desktop use. Why wouldn't that be sufficient?

Most PCs don't have NFC readers.

Almost all PCs do however have USB ports, which means they can have anything you can plug into an USB port.

Re: EU age verification app not planning desktop support

#428
post #271

Earlier quoted context omitted.

> This already the case today, you can't run your bank's app or government eID apps on anything but Google or Apple devices. Fairphone 6 with e/OS begs to differ. Dutch phone with a French OS. No issues.

well, my bank's app does not run on /e/OS. i get some kind of security error

Responding to an anecdote with another is fair I suppose

Re: EU age verification app not planning desktop support

#429
The current reference design is not compatible with existing law. eIDAS regulation that is the legal basis for digital wallet mandates unlinkability. GDPR has a general requirement for technical controls to be state of the art. Inherent reliance on American monopolies is incompatible with Digital Markets Act.

The current design and usage of cryptographic primitives does not allow for unlikability (it is actually quite easy to for verifiers and relying parties to collude) and it certainly is not state-of-the-art. BBS signatures would achieve actual unlinkability, but those have been outright rejected by the designers.

Current implementation is poised to not comply with the regulation that established the mandate for the wallet and it violates GDPR. The best one could hope for is for CJEU to strike down the whole project.

The GitHub organization of the OP's post has various issues that discuss these ills. Here is a position of several cryptographers against the current design: https://github.com/eu-digital-identity-wallet/eudi-doc-archi...

Re: EU age verification app not planning desktop support

#430

Earlier quoted context omitted.

Of course-- there will be accommodations to start out with. Then, after the new system has become "just the way things work," the accommodations will be removed for security or efficiency or some other reason. Or maybe not. I've never lost a boarding pass, but if you lose one, you can get it re-issued somewhere, right?

The likely future is where you'll be given a USB-C charger to charge your phone. If you have no phone or is broken, it will be the equivalent to having a strongly damaged passport. No fly that day, get a new phone, fly on another date, just like if you needed a new passport. The phone will be your ID, passport, credit card and everything. But since it will be all backed up in Google/Apple/Microsoft cloud, maybe you'l…

How are you going to buy a new phone when you have to pay with your broken phone?
Post reply on HN