Comment on 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives

• bekopharm@discuss.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

  AusweisApp

  Not exactly sure what you mean by this. I know for a fact that AusweisApp2 works fine on e.g. Linux and there is this: www.ausweisapp.bund.de/open-source-software

  Of course a close eye must be kept on this but ffs this is miles better compared to the usual practise of copying ID documents in shops or using the PostIdent system and beats any 3rd fishy party provider - and that includes device manufacturers.

  Same for the upcoming Wallet asking for open and established standards.

  source

  • ell1e@leminal.space ⁨2⁩ ⁨weeks⁩ ago

    I am referring to the EU Wallet age verification app: github.com/…/av-app-android-wallet-ui/ Sorry that I forgot to link it.

    And just because it might beat PostIdent, doesn’t mean it’s sane to give up online anonymity for age checks everywhere. The EU claims the wallet will allow anonymous age checks, but if they ever tracked you, pretty sure you wouldn’t know.

    source

    • bekopharm@discuss.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

      This is not how remote attestation works. It’s the whole point of the age verification of the wallet that such meta data doesn’t have to be stored. The data submitted is transparent and can be viewed before accepting the verification. It’s in the core concept that this process is unlinkable and the goal is to implement this with ZKP (Zero-Knowledge Proof) mechanisms.

      That is in the technical spec for this proposal. It is designed for exactly this kind of requested online anonymity.

      Does this have to be watched? Absolutely Yes. What you’re doing here is spreading FUD though without any proof whatsoever just because “iTs fRoM tHe gOv”. Now I don’t know your frame of reference and it’s probably a good idea to keep a healthy level of mistrust in place but(!) the EU does a lot of things correct and I take this over any system designed by a private company that is definitely always only interested in our best: money.

      source

      • ell1e@leminal.space ⁨2⁩ ⁨weeks⁩ ago

        Here are my sources:

        1. pluralistic.net/2025/08/14/bellovin/ (I don’t agree with every bit of that article.)

           In practice, the security and privacy guarantees of the CL protocol require two different kinds of wholly independent institutions: identity providers (who verify your documents), and certificate authorities (who issue cryptographic certificates based on those documents). If these two functions take place under one roof, the privacy guarantees of the system immediately evaporate.

           (“CL” seems to refer to a common zero knowledge proof algorithm.)

        2. github.com/…/architecture-and-technical-specifica…

           Technical Requirements: An Age Verification App shall support the following: […] Request from the operating system a tamper-evident attestation of AVI properties

           (As far as I know, they mean device attestation with this where you no longer own your device.)

        3. github.com/eu-digital-identity-wallet/…/20

           The EUDI Wallet team is participating in a wider, EU-wide collective sleepwalk into a serious trap: You, along with the entire EU Digital-Identity movement, are hard-wiring the EU’s civic governance to Apple and Google’s hardware and software stack.

        4. github.com/eu-digital-identity-wallet/…/15

           Requires accepting “Terms of Service” to access basic functions of being a citizen. Your demo video shows you requiring accepting “Terms of Service” and “Data Protection Information” which I guess should really be “Privacy Policy”.

        What are your sources?

        source

        • -> View More Comments