390
The new age verifying app for the EU will only accept Google Play integrity for Android, de-facto banning any aftermarket OS like GrapheneOS (github.com)
submitted 1 year ago by to c/privacy@lemmy.ml
20 comments fedilink hide all child comments
 

cross-posted from: https://sh.itjust.works/post/42943610

Taken from the readme of the app on github:

The current release provides only basic functionality, with several key features to be introduced in future versions, including:

App and device verification based on Google Play Integrity API and Apple App Attestation

Additional issuance methods beyond the currently implemented eID based method.

These planned features align with the requirements and methods described in the Age Verification Profile.

There is an issue opened to remove this as it's basically telling us that to verify our age in the EU an American corporation has the last word, making it not only a privacy nightmare but a de-facto monopoly on the phone market that will leave out of the verification checks even the fairphone (european) with /e/os.

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 1 year ago (1 child)

Is there anyone more familiar with this age verification process that can explain if and what data does this share with some UE body or government? Is the the system 100% client-side or is there any API or tie to other govt service that may be able to track when and where (website) you're trying to verify your age? Thanks.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 14 points 1 year ago*

    Apparently they want everybody to get some sort of "EU wallet", that is, some digital signed identity which sounds super dystopian. But that's just what I read. It sounds like a complete disaster.

    I feel like a productive way to address this would be to make a child mode mandatory for all operating systems, as some EU countries already did, and then to give parents a better incentive to actually enable it. For example, all end-user devices could be pressured into prominently showing an option to enable it when first booted up (without forcing your hand either way) so that it's hard to miss. There are so many other ways to improve this situation.

  • permalink
  • fedilink
  • source
  • parent