bekopharm
@bekopharm@discuss.tchncs.de
I dabble in coding, admin…, linux, gaming, HEMA, reenactment, LARP, e-mobility, carhacking, simpits and… parenting?
- 🌐 beko.famkos.net/author/beko / @beko@beko.famkos.net
- 🦣 social.tchncs.de/@bekopharm
- 📼 tube.tchncs.de/a/bekopharm
- 📹 live.famkos.net
- Comment on 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives 2 weeks ago:
Feel free to share your sources.
The source is the technical spec. Read this yourself more closely!
Interoperability: The solution ensures seamless integration across diverse device operating systems, wallet applications, and online services.
And let’s not ignore the demo part:
The white label solution will be implemented based on the open source EUDI Wallet Reference implementation libraries.
And yes it is good that people watch this carefully (and voice their concerns in a civil matter, which does not seem to be the case with most heated comments from your examples). But!
This is the very same with e.g. Let’s Encrypt. Or a VPN ‘service’. Or CloudFlare, that so many people love to hide behind.
What ifs. The spec does explicitly not allow exactly this and it’s our job to investigate such providers closely and in doubt start and run trustworthy providers ourselves. And Let’s Encrypt is again a prime example for something like this.
Oh and no nothing in the spec nails this down to Google or Apple alone. These are examples for smartphones for existing eco systems. I do not need a smartphone for e.g. AusweisApp and I will ask the same for E-Wallet because this is also in the specs (Interoperability) and explicitly not tied to some vendor specific eco system but to protocols and cyphers.
And this is where the next FUD may come in: TPM[1]. This does [also] exactly this: Device attestation and is a perfect candidate for regular PCs. That’s probably just the next can of worms for you though and with this I’ll end this discussion because even with plenty of What Ifs I do not see this solved from anyone in any better way - and again especially not from some company like Dis-fuckin-cord. This is exactly what a GOV exists for and they’d be sleeping on their job not providing digital ways for this very use-case.
[1] And just so that you may understand my POV on this: I demonstrated against TCPA back in the days. I can accept TPM tho. It’s a rather useful compromise and something similar exists for most smartphone ALSO. That is a good thing because this is responsible for keeping e.g. password wallets private. Something the “oh noes, Windows requires TPM now” crowd never understood - and this is from a die hard Linux user for decades.
- Comment on 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives 2 weeks ago:
This is not how remote attestation works. It’s the whole point of the age verification of the wallet that such meta data doesn’t have to be stored. The data submitted is transparent and can be viewed before accepting the verification. It’s in the core concept that this process is unlinkable and the goal is to implement this with ZKP (Zero-Knowledge Proof) mechanisms.
That is in the technical spec for this proposal. It is designed for exactly this kind of requested online anonymity.
Does this have to be watched? Absolutely Yes. What you’re doing here is spreading FUD though without any proof whatsoever just because “iTs fRoM tHe gOv”. Now I don’t know your frame of reference and it’s probably a good idea to keep a healthy level of mistrust in place but(!) the EU does a lot of things correct and I take this over any system designed by a private company that is definitely always only interested in our best: money.
- Comment on This whistle fights fascists | How thousands of 3D-printed whistles are derailing ICE. 2 weeks ago:
That’d be sad. I despise noisy cars|bikes|whatsoever :/
- nothing against the whistles in that case
- Comment on 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives 2 weeks ago:
AusweisApp
Not exactly sure what you mean by this. I know for a fact that AusweisApp2 works fine on e.g. Linux and there is this: www.ausweisapp.bund.de/open-source-software
Of course a close eye must be kept on this but ffs this is miles better compared to the usual practise of copying ID documents in shops or using the PostIdent system and beats any 3rd fishy party provider - and that includes device manufacturers.
Same for the upcoming Wallet asking for open and established standards.
- Comment on This whistle fights fascists | How thousands of 3D-printed whistles are derailing ICE. 2 weeks ago:
Curious, was that law changed eventually?
- Comment on 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives 2 weeks ago:
The eID can do this EU wide already but it’s usage is regulated and that’s not something a company wants to accept. The EU Digital Identity Wallet would hit the spot even more, since it’s very privacy friendly: ec.europa.eu/…/The+Age+Verification+Manual
That’s still in testing though and even less in the interest of a company that wants to extract as much user data as possible.
- Comment on Is this Samsung USB c adapter fake? 1 year ago:
Free perceived value weight 👍
- Comment on Not allowed to work from home 1 year ago:
Sounds kinky.
- Comment on Not allowed to work from home 1 year ago:
for some reason they wanted me to have slack
I get similar requirements from school and kindergarten nowadays. They want me to install weird apps for communications. Last school had an online portal on the web and mail. That was a no brainer but these apps?
Hello Waydroid.
Not gonna taint my own phone with this stuff. That includes WhatsApp.
- Comment on Not allowed to work from home 1 year ago:
pvt NoPhone
Love this bit. Gonna steal it :D
- Comment on Not allowed to work from home 1 year ago:
Either this or there are defined “core hours” where everyone must be available.
- Comment on Opened an old scientific instrument to see if it works... 1 year ago:
Jul 91? Now I feel old.