Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

EU age verification app to ban any Android system not licensed by Google

⁨483⁩ ⁨likes⁩

Submitted ⁨⁨1⁩ ⁨day⁩ ago⁩ by ⁨Gsus4@mander.xyz⁩ to ⁨technology@lemmy.world⁩

https://www.reddit.com/r/BuyFromEU/comments/1mah79o/eu_age_verification_app_to_ban_any_android_system/

source

Comments

Sort:hotnewtop
  • artyom@piefed.social ⁨1⁩ ⁨day⁩ ago

    Please don't link to Reddit. Context below:

    The EU is currently developing a whitelabel app to perform privacy-preserving (at least in theory) age verification to be adopted and personalized in the coming months by member states. The app is open source and available here: <https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui>.

    Problem is, the app is planning to include remote attestation feature to verify the integrity of the app: <https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui?tab=readme-ov-file#disclaimer>. This is supposed to provide assurance to the age verification service that the app being used is authentic and running on a genuine operating system. Genuine in the case of Android means:

    • The operating system was licensed by Google

    • The app was downloaded from the Play Store (thus requiring a Google account)

    • Device security checks have passed

    While there is value to verify device security, this strongly ties the app to many Google properties and services, because those checks won't pass on an aftermarket Android OS, even those which increase security significantly like GrapheneOS, because the app plans to use Google "Play Integrity", which only allows Google licensed systems instead of the standard Android attestation feature to verify systems.

    This also means that even though you can compile the app, you won't be able to use it, because it won't come from the Play Store and thus the age verification service will reject it.

    The issue has been raised here <https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/10> but no response from team members as of now.

    All credit for the original post goes to /u/CreepyZookeepergame4. Link to the original post: https://reddit.com/r/BuyFromEU/comments/1mah79o/eu_age_verification_app_to_ban_any_android_system/

    source
    • dubyakay@lemmy.ca ⁨1⁩ ⁨day⁩ ago

      So is there a way to apply pressure on the EU to think this through first? Surely they could have different ways that doesn’t lock them in to google services.

      source
      • artyom@piefed.social ⁨1⁩ ⁨day⁩ ago

        According to the users in that issue, the mere application of the API is illegal, as is the dependency. Sooo I dunno what kind of PACs there are in the EU but I would be leaning on and contributing to those.

        source
        • -> View More Comments
      • iii@mander.xyz ⁨23⁩ ⁨hours⁩ ago

        To avoid people from simply copying the “age proof” and having others reuse it, a nonce/private key combo is needed. To protect that key a DRM style locked down device is necessary.

        Seeing the EU doesn’t make any popular hardware, their plan will always rely on either chinese of US manufacturers.

        source
        • -> View More Comments
    • Appoxo@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

      Wouldnt it be enough to verify through IMEI to make sure the OS isnt emulated?

      source
      • artyom@piefed.social ⁨23⁩ ⁨hours⁩ ago

        IMEI is PII

        source
        • -> View More Comments
  • Wolf@lemmy.today ⁨23⁩ ⁨hours⁩ ago

    What’s going on with Europe lately? You all really want GOOGLE of all mega corps in control of your identity?

    You’re going the opposite way, it should be your right to install an alternate OS on your phone. If anything they should be banning Google licensed Android.

    source
    • BrightCandle@lemmy.world ⁨22⁩ ⁨hours⁩ ago

      Its not the populace, our politicians just like in the US have gone rogue. People are voting for the nutters due to anti immigration propaganda and so increasingly getting far right. Its happening across the entire western world and its bad news for everyone.

      source
      • dreadbeef@lemmy.dbzer0.com ⁨15⁩ ⁨hours⁩ ago

        had a hope for europe to actually be socialists, at least no one ever confuses america for being left

        source
    • Gsus4@mander.xyz ⁨23⁩ ⁨hours⁩ ago

      I just wanted the EU to fork lineageOS and provide it as an alternative in major chains.

      source
      • Wolf@lemmy.today ⁨23⁩ ⁨hours⁩ ago

        I miss LineageOS so much, my last couple of phones haven’t had a build of it and my asshole banking apps wont work on it now.

        For my next phone i’m just not going to buy one unless it’s already supported and if I have to skip online banking I’ll do it.

        source
        • -> View More Comments
      • anzo@programming.dev ⁨14⁩ ⁨hours⁩ ago

        Fwiw there’s fairphone with eOS

        source
    • jabjoe@feddit.uk ⁨14⁩ ⁨hours⁩ ago

      They get their tech advice for laws from big tech.

      source
    • GreenKnight23@lemmy.world ⁨17⁩ ⁨hours⁩ ago

      to hear it from any non-Americans on lemmy they’re better than America.

      looks like they’re just as susceptible to this fascist bullshit to me though…

      source
      • Nico_198X@europe.pub ⁨15⁩ ⁨hours⁩ ago

        We invented this bullshit, of course we’re susceptible.

        Still better than America, though ;P XD

        source
      • NikkiDimes@lemmy.world ⁨14⁩ ⁨hours⁩ ago

        Hey Google, where is the origin of fascism?

        source
  • Electricd@lemmybefree.net ⁨1⁩ ⁨day⁩ ago

    Fuck the play integrity API, Play Store and Google play services

    source
    • iii@mander.xyz ⁨23⁩ ⁨hours⁩ ago

      And the EU for their stupid fucking censorship

      source
      • Electricd@lemmybefree.net ⁨22⁩ ⁨hours⁩ ago

        Sure, but it has some good sides as well

        It’s just a shame that they aren’t just made of the good sides

        source
  • carrylex@lemmy.world ⁨15⁩ ⁨hours⁩ ago

    European Digital identity

    looks inside:

    Hosted on GitHub in the US 👏

    source
  • Geth@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

    What is it with everyone being obsessed with porn censorship suddenly? Why is this a trend?

    At first I thought it’s about control and data gathering, but this seems like too much of a genuine attempt at such a system. Why is the government so obsessed with parenting and nannying the citizens?

    source
    • StarryPhoenix97@lemmy.world ⁨20⁩ ⁨hours⁩ ago

      In addition to the other answers, I want to add that the anti-porn stuff gives them the reason they need to force you into a more monitored environment. In which, everything you do is tracked. Your instinct is right imo. They want Google monitoring your mobile device as the primary piece. It’s legislative market capture and fascism at the same time. No one company has to have all the info on you, but in forcing you to confirm yourself they make it so half a dozen and report on you if your habits trigger something. Half the technology is already in place as it’s been built under the guise of better ad targeting.

      source
    • WhatAmLemmy@lemmy.world ⁨22⁩ ⁨hours⁩ ago

      Fascism is making a comeback, and everyone’s dumb enough to believe it’s an America problem, instead of a global oligarchy, class war, problem.

      source
    • NeilBru@lemmy.world ⁨20⁩ ⁨hours⁩ ago

      The legal precedent for gaining the ability to ban content under the guise of preventing the dissemination of “obscenity” allows the future banning of “obscene” political opinions and “obscene” dissent.

      Once the “obscene” political content is banned, the language will change to “offensive”.

      After “offensive” content is banned, then the language will change to “inappropriate”.

      After “inappropriate”, the language will change to “oppositional”.

      If you believe this is a “slippery slope” fallacy, then as a counterpoint, I would refer to the actual history of the term “politically correct”:

      The phrase politically correct first appeared in the 1930s, when it was used to describe dogmatic adherence to ideology in totalitarian regimes, such as Nazi Germany and Soviet Russia.[5] Early usage of the term politically correct by leftists in the 1970s and 1980s was as self-critical satire;[8] usage was ironic, rather than a name for a serious political movement.[12][13][14] It was considered an in-joke among leftists used to satirise those who were too rigid in their adherence to political orthodoxy.[15] The modern pejorative usage of the term emerged from conservative criticism of the New Left in the late 20th century, with many describing it as a form of censorship.[16]

      source
    • cley_faye@lemmy.world ⁨14⁩ ⁨hours⁩ ago
      • Govt. want to control access to everything
      • People are not too happy about this
      • Govt. say "to protect children, you have to install this app, under these conditions"
      • You want to protect childrens, so you do so
      • Govt. say "to protect this or that, we have to impose approved gates on many websites, based on the app you installed before"
      • You want to protect this or that, so you accept it
      • Govt. say "fuck you, you whatever is not in line with the fucking biggot at the helm of your country/federation/whatever, now we know what you do, we control what’s allowed, and anything to get around the blocks is illegal and will land you in jail. Fuck you again, fucker."
      • You’re a happy little plant in a pot.

      Basically, it’s not about porn. It’s not about protecting kids. It’s not about helping “victims of abuse”. If anything, it’s putting all these in more danger, along with everyone else.

      source
    • iii@mander.xyz ⁨23⁩ ⁨hours⁩ ago

      Why is the government so obsessed with parenting and nannying the citizens?

      I wonder if it’s because people from outside the traditional political families are getting popular votes.

      It’s easier to blame “the internet”, and censor, than for a politician to look in the mirror and seek where the discontent comes from.

      source
    • General_Effort@lemmy.world ⁨22⁩ ⁨hours⁩ ago

      Been wondering myself. It’s certainly part of the general right-ward trend. Societies are becoming more illiberal. It’s not just the right that is moving to the right.

      Obscenity laws have always been about enforcing the “correct” sexuality. Protecting minors meant preventing them from becoming “confused”; ie becoming LGBTQ.

      You also have growing nationalism. In Europe, people are saying we should enforce “our laws” and “our values” against meddling foreigners (ie Big Tech). It often sounds a lot like the rants against the “globalists” that have been a staple among the US far right for decades. Age verification is part of that.

      For example, Germany has long enforced age verification within its borders. It’s part of the whole over-regulation thing that makes competitive tech companies almost impossible in Europe. For some reason, Europeans have trouble accepting that. You can see it here on Lemmy. The solution must be to enshittify everything to level the playing field.

      source
    • Bruncvik@lemmy.world ⁨23⁩ ⁨hours⁩ ago

      This is just my speculation, so take it as you will. The EU has been pushing for digital ID cards for quite a while, and this is just another attempt. The last serious attempt was the Covid vaccination passport, but so many people still opted for paper certs, and the rest deleted the app when vaccination was no longer mandatory, that it failed again. So, now the authorities are becoming smart and trying to go through the vector that has a proven record of driving technological change: porn.

      source
    • DeathByBigSad@sh.itjust.works ⁨10⁩ ⁨hours⁩ ago

      FYI: Most of the world actually restricts, and some outright bans, porn.

      Its only western countries that have unrestricted access to porn.

      source
    • altima_neo@lemmy.zip ⁨21⁩ ⁨hours⁩ ago

      Gonna guess it’s outside influence with money pushing their ideology. Just like the crap with Visa and steam, itch.io, etc.

      source
    • Vinstaal0@feddit.nl ⁨1⁩ ⁨day⁩ ago

      This has been discussed a while back, at least here in NL as far as I know it started because of legalising online gambling for which you need to be identified. Also, due to GDPR, businesses aren’t allowed to make copies of ID’s/passports/driving licences any more which is required for certain businesses (notaries, accountants, etc). In my office we currently use some kind of identification software, but it isn’t anonyms because well we wouldn’t be able to do our job.

      source
      • Prime@lemmy.sdf.org ⁨23⁩ ⁨hours⁩ ago

        This sounds like a misunderstanding of gdpr to me?

        source
        • -> View More Comments
    • Gsus4@mander.xyz ⁨23⁩ ⁨hours⁩ ago

      Too many bots online :D I’d like to know if I’m talking to a real sockpuppet when I’m online :D…but just for that and only share data from my “wallet id” on a strict need to know basis.

      source
  • UnfortunateShort@lemmy.world ⁨1⁩ ⁨day⁩ ago

    Yeah no. Requiring anything Google for something as basic as this violates the GDPR. If they go through with this, it’s one legal case until they have to revise it.

    source
    • gian@lemmy.grys.it ⁨23⁩ ⁨hours⁩ ago

      Edit: German eID works on any Android btw., flawless actually. I sure hope I can use that for verification

      Same in Italy… I mean, I can pay taxes with that application but I cannot be verified for my age ? Seriously EU ?

      source
    • SaharaMaleikuhm@feddit.org ⁨1⁩ ⁨day⁩ ago

      Yes and the PC app you connect the Android app too also works on Linux. It’s even on flathub. Pretty nice, can’t complain.

      source
      • UnfortunateShort@lemmy.world ⁨17⁩ ⁨hours⁩ ago

        That Flathub app is unofficial afaik, which is why I don’t use it. Normally I wouldn’t care, but this seems important enough to not use a repackaged version

        source
    • boonhet@sopuli.xyz ⁨1⁩ ⁨day⁩ ago

      EID and equivalents are great for a lot of things, but do you want your porn site to know who you are? The new app is supposed to verify your age but not give out your PII. Not sure eID can do that?

      source
      • tribut@infosec.pub ⁨1⁩ ⁨day⁩ ago

        EID can be used for anonymous age verification. It doesn’t even need to give out your birthday and can attest to any “over the age of X” requirement.

        Ref: www.bfdi.bund.de/DE/…/Der_Personalausweis.html

        source
        • -> View More Comments
    • General_Effort@lemmy.world ⁨14⁩ ⁨hours⁩ ago

      violates the GDPR.

      I wouldn’t be too sure. Data protection mainly binds private actors. Any data processing demanded by law is legal. You’d really have to know the finer points of the law to judge if this is ok.

      source
  • renamon_silver@lemmy.wtf ⁨18⁩ ⁨hours⁩ ago

    Why is the EU licking america’s asshole?

    source
    • 0x0@lemmy.zip ⁨17⁩ ⁨hours⁩ ago

      'Cos it’s been turning (far-)right as well in the last few years.

      source
      • samus12345@sh.itjust.works ⁨9⁩ ⁨hours⁩ ago

        Which is why Europeans shouldn’t be too eager to laugh about the US being a fascist hellhole. I could happen there again if they’re not vigilant.

        source
  • joel_feila@lemmy.world ⁨20⁩ ⁨hours⁩ ago

    so if I use graphene os then I can’t look at porn in the eu

    source
    • eleitl@lemmy.zip ⁨18⁩ ⁨hours⁩ ago

      Just use a VPN then.

      source
      • DeathByBigSad@sh.itjust.works ⁨11⁩ ⁨hours⁩ ago

        Wait they put up a EU Great Firewall and ban VPNs

        source
  • Blaster_M@lemmy.world ⁨1⁩ ⁨day⁩ ago

    So, darkweb sites it is.

    source
  • PushButton@lemmy.world ⁨1⁩ ⁨day⁩ ago

    The US might have shot itself in the foot by electing Trump, but the EU is really going to shoot itself in the head if that continue in the same trajectory.

    source
    • Jolteon@lemmy.zip ⁨1⁩ ⁨day⁩ ago
      [deleted]
      source
      • yeahiknow3@lemmings.world ⁨1⁩ ⁨day⁩ ago

        Sorry to horrify you but we are definitely worse.

        source
      • iii@mander.xyz ⁨23⁩ ⁨hours⁩ ago

        You should read more international news if you think either the EU or US is “the worst place”. Somalia for example has been in civil war since the 1980s.

        source
  • viking@infosec.pub ⁨1⁩ ⁨day⁩ ago

    So VPN on the router permanently set to Singapore it is.

    source
    • ggtdbz@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

      Apparently this is illegal to implement as of right now, but it’s not helping the feeling of technological doomerism I get whenever I think about this whole identity verification situation.

      source
      • sailorzoop@lemmy.librebun.com ⁨20⁩ ⁨hours⁩ ago

        Sorry, do you have any sources for this? I was just thinking about getting a VPS in Switzerland today.

        source
        • -> View More Comments
  • QueenHawlSera@sh.itjust.works ⁨1⁩ ⁨day⁩ ago

    They killed the old net and are in the middle of murdering the new one too.

    source
  • dugmeup@lemmy.world ⁨1⁩ ⁨day⁩ ago

    Wut?!?!

    source
  • cley_faye@lemmy.world ⁨14⁩ ⁨hours⁩ ago

    Well, I hope they’ll pay for my “EU age verification” phone, since my own won’t work. I’ll gladly buy one and not use it either.

    source
  • a1studmuffin@aussie.zone ⁨1⁩ ⁨day⁩ ago

    It hurt itself in its confusion!

    source
    • tabular@lemmy.world ⁨1⁩ ⁨day⁩ ago

      Google Pain Services

      source
  • rottingleaf@lemmy.world ⁨1⁩ ⁨day⁩ ago

    As usual, it’s the implementation that matters.

    Someone jumped at me for comparing EU and MAGA to Stalin’s and Hitler’s regimes, quote, “arguing in newspapers whose worker class has been liberated more”. Like they are not equal at all and all such.

    source
  • sexy_peach@feddit.org ⁨14⁩ ⁨hours⁩ ago

    Just like the bank app etc.

    source