iii comments on EU age verification app to ban any Android system not licensed by Google

Technology

89,627 readers

13,807 active

2,300 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago

moderators

[–] iii@mander.xyz 1 point 1 year ago (2 children)

If it is about hiding some data handled by the app, that will be instantly extracted.

Look at the design of DRM chips. They bake the key into hardware. Some keys have been leaked, I think playstation 2 is an example, but typically by a source inside the company.

permalink

fedilink

source

parent

hideshow 2 child comments

[–] Redjard@lemmy.dbzer0.com 1 point 1 year ago (1 child)

That applies to play integrity, and a lot of getting that working is juggling various signatures and keys.
The suggestion above which I replied to was instead about software-managed keys, something handed to the app which it then stores, where the google drm is polled to get that sacred piece of data. Since this is present in the software, it can be plainly read by the user on rooted devices, which hardware-based keys cannot.

Play integrity is hardware based, but the eu app is software based, merely polling googles hardware based stuff somewhere in the process.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] iii@mander.xyz 1 point 1 year ago

merely polling googles hardware based stuff

I understand. In the context of digital sovereignty, even if the linked shitty implementation is discarded (as it should be), every correct implementation will require magic DRM-like chip. This chip will be made by a US or Asian manufacturer, as the EU has no manufacturing.

permalink

fedilink

source

parent