alt Hacker NewsMy understanding is that you are not forced to use this. Sites in the EU that will be required to verify user age will be free to use any method they wish as long as they can show it is as effective as the app and it does not violate privacy laws.
Most analysts expect sites will offer multiple ways, for a variety of reasons.
Eventually when the full EU Digital Identity Wallet is available age checks can be done using that and the age-only app will go away. For the full wallet the rules explicitly require platforms to have fallback mechanisms for users who are not using the digital wallet.
Replies
> Most analysts expect
Total bullshit.
There is no "effective" method without hardware remote attestation. If I control the system, I can just spoof whatever "verification" it is you're asking.
The whole point of hardware attestation is to put a cryptographic key in the computer that the users can't ever get at, then use that key to prove the computer booted a corporate owned operating system that's 100% aligned with government and capitalist surveillance and other cyberpunk dystopia nonsense.
Install a custom system that you control and they will say you have "tampered" with your device, and that transgression will get you ostracized from digital society.
This is what will happen, and if we let it happen might as well close down this site because everything the word hacker ever stood for will have been destroyed.
I literally lol'd at the "Most analysts expect..." line.
Yea, most analysts didn't expect the cookie banner nightmare we're living in either.
To think you can get only the narrow outcomes you want with zero unintended consequences while building root-level infrastructure for 1984 just illustrates the laughable hubris of the authoritarian impulse.
"Most analysts" actually expect the opposite:
https://waag.org/en/article/european-digital-id-wallets-are-...
Websites will do the easiest, lowest friction, and most user-familiar thing possible to comply with the laws. And that is just Google or Apple device attestation.
And how, exactly, will one acquire this "full EU Digital Identity Wallet"? Will I be able to compile it from source and run it on a computing device of my own choosing?