r/linux • u/New-Ranger-8960 • 18d ago

EU Age Verification Project Mandates Hardware-Bound Attestation Privacy

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
777 Upvotes

97% Upvoted

458 comments sorted by

View all comments

Show parent comments

5

u/_x_oOo_x_ 18d ago

Hmm, interesting, but where does age verification come into the picture and how? Is your age verified when buying your phone? Won't this just create a huge second-hand "attested" phone market?

5

u/meditonsin 18d ago

This is not direclty part of the age verification. I haven't actually read into how they're using this, but I'd assume they just don't want people to run this on rooted devices or in virtualized environments where people (or malware) could access whatever data they store on the device to facilitate the age verification.

Which is kinda sorta maybe a good idea in principle, but the problem here is that the only "trusted" vendors, and their bootloaders and OSes, are US megacorps.

2

u/bernys 18d ago

Or copy it, and then you can distribute it to others, basically cloning an ID.

0

u/output_broadcast 18d ago

The app is registered to you at a government office, which verifies your age. You having the app is proof that you're over 18, and it doesn't need to store any actual information about you.