Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

EU age verification app hacked, 2 minute How to posted

xcancel.com

Post reply on HN
Print view View original

1–10 of 33 posts

Re: EU age verification app hacked, 2 minute How to posted

#2

Post by raverbashing »

"hacked"

And then this person says the pin shouldn't be encrypted (but I bet if this was otherwise they would be complaining as well)

I think scrutiny over the apps are fine, but treating every issue with the same brush is not

> this product will be the catalyst for an enormous breach at some point

Breach of what exactly is not clear since most information never leaves the phone

Re: EU age verification app hacked, 2 minute How to posted

#3

Post by archerx »

raverbashing wrote: post #2

"hacked" And then this person says the pin shouldn't be encrypted (but I bet if this was otherwise they would be complaining as well) I think scrutiny over the apps are fine, but treating every issue with the same brush is not > this product will be the catalyst for an enormous breach at some point Breach of what exactly is not clear since most information never leaves the phone

Maybe the biometric and photos of id and possibly selfies not being deleted properly?

Re: EU age verification app hacked, 2 minute How to posted

#4

Post by raverbashing »

archerx wrote: post #3
raverbashing wrote: post #2

"hacked" And then this person says the pin shouldn't be encrypted (but I bet if this was otherwise they would be complaining as well) I think scrutiny over the apps are fine, but treating every issue with the same brush is not > this product will be the catalyst for an enormous breach at some point Breach of what exactly is not clear since most information never leaves the phone

Maybe the biometric and photos of id and possibly selfies not being deleted properly?

Yes (later in the thread it seems to be the case, though xcancel makes threads even more confusing)

But more importantly, it's not being deleted from your phone. You know, your phone with all of your other photos

Yes it should be fixed, but this "all of nothing" approach to security is just counter-productive

Re: EU age verification app hacked, 2 minute How to posted

#5

Post by jeroenhd »

That's not the real age verification app (there is no "EU app", every member state releases their own), it's the proof of concept that was made to demonstrate the system.

This stuff is also why the EU doesn't want the app to run on rooted devices. I don't believe there's a way to pass Strong Integrity yet, as the app doesn't support the hackable Android 8 software attestation.

Re: EU age verification app hacked, 2 minute How to posted

#6

Post by azalemeth »

jeroenhd wrote: post #5

That's not the real age verification app (there is no "EU app", every member state releases their own), it's the proof of concept that was made to demonstrate the system. This stuff is also why the EU doesn't want the app to run on rooted devices. I don't believe there's a way to pass Strong Integrity yet, as the app doesn't support the hackable Android 8 software attestation.

I just want this whole idea to kindly please bog off. We shouldn't be further creating the apparatus of the surveillance state.

Re: EU age verification app hacked, 2 minute How to posted

#7

Post by ChocolateGod »

jeroenhd wrote: post #5

That's not the real age verification app (there is no "EU app", every member state releases their own), it's the proof of concept that was made to demonstrate the system. This stuff is also why the EU doesn't want the app to run on rooted devices. I don't believe there's a way to pass Strong Integrity yet, as the app doesn't support the hackable Android 8 software attestation.

> This stuff is also why the EU doesn't want the app to run on rooted devices.

I would argue the EU doesn't want to run it on rooted devices because malware could violate the security sandbox and intercept information. This is largely the same reason why Google Pay requires SafetyNet.

Post reply on HN