logoalt Hacker News

jeroenhdtoday at 9:54 AM4 repliesview on HN

That's not the real age verification app (there is no "EU app", every member state releases their own), it's the proof of concept that was made to demonstrate the system.

This stuff is also why the EU doesn't want the app to run on rooted devices. I don't believe there's a way to pass Strong Integrity yet, as the app doesn't support the hackable Android 8 software attestation.


Replies

azalemethtoday at 10:15 AM

I just want this whole idea to kindly please bog off. We shouldn't be further creating the apparatus of the surveillance state.

show 2 replies
atanasitoday at 2:29 PM

If the app wants to take advantage of mandatory hardware attestation, it has to require Android 13 or later. This would undermine somewhat the promise that the app supports a wide range of devices. Even banks don't currently enforce Android 13+.

show 1 reply
karusselltoday at 4:05 PM

> why the EU doesn't want the app to run on rooted devices

Where does the EU say so?

ChocolateGodtoday at 10:34 AM

> This stuff is also why the EU doesn't want the app to run on rooted devices.

I would argue the EU doesn't want to run it on rooted devices because malware could violate the security sandbox and intercept information. This is largely the same reason why Google Pay requires SafetyNet.

show 1 reply