Privacy

3231 readers

130 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 2 years ago

MODERATORS

Ategon@programming.dev

danielintempesta@programming.dev

135

The new age verifying app for the EU will only accept Google Play integrity for Android, de-facto banning any aftermarket OS like GrapheneOS (github.com)

submitted 5 months ago by Blaze@piefed.zip to c/privacy@programming.dev

38 comments fedilink hide all child comments

Taken from the readme of the app on github:

The current release provides only basic functionality, with several key features to be introduced in future versions, including:

App and device verification based on Google Play Integrity API and Apple App Attestation

Additional issuance methods beyond the currently implemented eID based method.

These planned features align with the requirements and methods described in the Age Verification Profile.

There is an issue opened to remove this as it's basically telling us that to verify our age in the EU an American corporation has the last word, making it not only a privacy nightmare but a de-facto monopoly on the phone market that will leave out of the verification checks even the fairphone (european) with /e/os.

you are viewing a single comment's thread
view the rest of the comments

[–] IceFoxX@lemmy.world 0 points 5 months ago* (last edited 5 months ago) (1 children)

DSGVO etc? Who cares... 🤢🤮

edit: "Who cares" from the point of view of the EU, because the EU itself is once again ignoring the DSGVO with this solution.

[–] vapeloki@lemmy.world 1 points 5 months ago* (last edited 5 months ago)

Read the ducking docs

The Age Verification (AV) android app is part of the Age Verification Solution Toolbox and serves as a component that can be used by memberstates, if necessary, to develop a national solution and build upon the building blocks of the toolbox. [...] This is an initial version of the software, developed solely for the purpose of demonstrating the business flow of the solution. It is not intended for production use, and does not yet include the full set of functional, security, or integration features required for a live deployment.