138
The new age verifying app for the EU will only accept Google Play integrity for Android, de-facto banning any aftermarket OS like GrapheneOS (github.com)
submitted 1 year ago by to c/privacy@programming.dev
30 comments fedilink hide all child comments
 

Taken from the readme of the app on github:

The current release provides only basic functionality, with several key features to be introduced in future versions, including:

App and device verification based on Google Play Integrity API and Apple App Attestation

Additional issuance methods beyond the currently implemented eID based method.

These planned features align with the requirements and methods described in the Age Verification Profile.

There is an issue opened to remove this as it's basically telling us that to verify our age in the EU an American corporation has the last word, making it not only a privacy nightmare but a de-facto monopoly on the phone market that will leave out of the verification checks even the fairphone (european) with /e/os.

you are viewing a single comment's thread
view the rest of the comments
[–] 24 points 1 year ago (14 children)

There’s no reason why you can’t just have the browser for device say that the user is 18 or not.

Parents wouldn’t have to do anything after setting up their kids devices and putting a pin on their own. The setup is literally three buttons:

Who is this device used by:

  • Adults only (no age restrictions)
  • A child (all age restrictions active)
  • Both (restrictions with optional unlock PIN)

This whole debacle is a massive attack on freedom and is completely asinine. It incorporates no ideas from industry and only props up sketchy companies that make money from this specific implementation.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [–] 24 points 1 year ago (12 children)

    This tbh, age verification SHOULD be a parenting issue not a state mandated issue. If the state wants to make it an issue it should be on the parents to at least be a trusted party.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 12 child comments
    •
  • [–] 0 points 1 year ago (11 children)

    So, if a 12 year old appears on the door of a strip club, we don't check for his ID, we let him in because, after all, it's a parent topic and if the parents let the boy out, he can for sure visit a strip club, right?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 11 child comments
    •
  • [–] 1 point 1 year ago (10 children)

    This isn't a physical place, this is the internet. Parental controls exist specifically for this situation. Also at least personally, my parents did not let me go anywhere solo when I was 12...so 12 year old me would've never made it to a strip club.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 1 point 1 year ago (9 children)

    We have Linux, Mac, Windows, Android,..

    We have kids that know more about PC's then parents.

    Your suggestion can only work with systems that are heavily locked down and always controlled by the parents.

    That is not the world in that we live. "Just 3 buttons" is a very naive idea to a very complex problem

    But feel free, design a 3 button system, including client/server communication and more. Than we can talk about it

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 1 point 1 year ago (8 children)

    Routers have parental controls, if your kid can figure out how to bypass that then they can figure out a VPN and it's a moot point anyway. I have no idea what 3 button system you're talking a out here. I don't even get the analogy you're trying to make.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 1 point 1 year ago (7 children)

    Parental control in routers are based on DNS blacklist. That works only for full websites. What about steam, Netflix, online shops?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 1 point 1 year ago (6 children)

    ...those all use DNS too...apps use DNS to connect to their servers. DNS is used by basically everything internet connected, not just websites.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 1 point 1 year ago (5 children)

    Yes, and EVERYTHING you buy from stream you buy from the same domain. Everything you buy from Amazon, you buy from the same domain.

    Can you explain to me how a DNS filter knows if the user visits reddit for example to read gaming news or watch porn?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 1 year ago (4 children)

    Children of the age they're trying to protect are children that probably shouldn't be on reddit

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 1 year ago (3 children)

    What about Steam, Amazon, ....?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 1 year ago (2 children)

    Those services can either be blocked outright or use the parental controls provided by those services. None of this justifies big brother style government over reach. Additionally to me, the kids you need to protect are the really young ones. Teens ideally shouldn't be browsing adult content but it's far less damaging to them than young kids. And young kids don't need steam or unrestricted Netflix etc. They're also far less skilled at bypassing this stuff.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 1 year ago (1 child)

    So, parental controls now how much exactly if the person using it is the patent?

    And again, you didn't read anything about the EUID project. I know this because the data protection rules for the EUID are fucking insane. The reason why the project in question (age verification) exists, so user can verify their age WITHOUT providing any details about who they are to online services

    It is unbelievable, no glue about what this piece of software is who wrote it, for what, what are the legal grounds, but spitting bullshit, yes nice!

    I will write a more detailed post about the whole issue, where things must be changed, how, and the impact and false assumptions.

    But I will end this conversation here, because it just makes no sense. You lack the knowledge to provide anything useful to such a discussion

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    I don't care WHAT the data protection rules are. That's what you're missing. I DO NOT want services I use collecting my personal data outside of email. End of story. As it is I will NOT give services my phone number except in very specific circumstances. What you're missing is I DO NOT CARE what the rules are, the policies, the protections. They are collecting my ID and that in itself is INEXCUSABLE regardless of anything else.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 9 points 1 year ago

    This meeds to be put on a large sheet and be put on any large building we find, in my opinion. People need to wake the fuck up. There are easy solutions! We don’t have to force our beliefs onto our neighbours.

    Not only countries have right to be sovereign, this counts for families as well. Family should be able to decide their rules on their own and rise their children how they want, in my opinion.

    Of course, a kid should be told somehow, how to get help, if their parameters are monsters.

  • permalink
  • fedilink
  • source
  • parent