artyom

joined 1 month ago
[–] artyom@piefed.social 13 points 2 days ago

Boy I sure am glad BSky has these character limits. Would hate for this story to be too long.

[–] artyom@piefed.social 39 points 2 days ago

~~Europe~~ Everyone needs to drop Microsoft ASAP

FTFY

[–] artyom@piefed.social 6 points 2 days ago

Why do I care what brand is slapped on it?

[–] artyom@piefed.social 1 points 2 days ago

that a laptop/notebook can't achieve

It's not going to do anything you can't do with a laptop because they're using laptop processors.

but a traditional deskrop/sff system is to big for.

Too big how?

[–] artyom@piefed.social 1 points 2 days ago (7 children)

Besides a server...

[–] artyom@piefed.social 7 points 2 days ago* (last edited 2 days ago)

Yes it's tied to your identity. That's what PII is. It's also not tied at all to your OS.

[–] artyom@piefed.social 7 points 2 days ago (3 children)
[–] artyom@piefed.social 2 points 2 days ago (2 children)
[–] artyom@piefed.social 48 points 2 days ago (2 children)

According to the users in that issue, the mere application of the API is illegal, as is the dependency. Sooo I dunno what kind of PACs there are in the EU but I would be leaning on and contributing to those.

[–] artyom@piefed.social 237 points 2 days ago* (last edited 2 days ago) (28 children)

Please don't link to Reddit. Context below:

The EU is currently developing a whitelabel app to perform privacy-preserving (at least in theory) age verification to be adopted and personalized in the coming months by member states. The app is open source and available here: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui.

Problem is, the app is planning to include remote attestation feature to verify the integrity of the app: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui?tab=readme-ov-file#disclaimer. This is supposed to provide assurance to the age verification service that the app being used is authentic and running on a genuine operating system. Genuine in the case of Android means:

  • The operating system was licensed by Google

  • The app was downloaded from the Play Store (thus requiring a Google account)

  • Device security checks have passed

While there is value to verify device security, this strongly ties the app to many Google properties and services, because those checks won't pass on an aftermarket Android OS, even those which increase security significantly like GrapheneOS, because the app plans to use Google "Play Integrity", which only allows Google licensed systems instead of the standard Android attestation feature to verify systems.

This also means that even though you can compile the app, you won't be able to use it, because it won't come from the Play Store and thus the age verification service will reject it.

The issue has been raised here https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/10 but no response from team members as of now.

[–] artyom@piefed.social 1 points 2 days ago (1 children)

Buick is also a GM luxury brand.

view more: ‹ prev next ›