FRESH

Hacker News

EU age verification app hacked, 2 minute How to posted

70 points by johanstokking

by jeroenhd

4 subcomments

That's not the real age verification app (there is no "EU app", every member state releases their own), it's the proof of concept that was made to demonstrate the system.
This stuff is also why the EU doesn't want the app to run on rooted devices. I don't believe there's a way to pass Strong Integrity yet, as the app doesn't support the hackable Android 8 software attestation.

by karussell

0 subcomment

Link to the code (I think?): https://github.com/eu-digital-identity-wallet/av-app-android...

by izacus

0 subcomment

by redeeman

0 subcomment

isnt it just a little bit funny that all this age verification is coming everywhere all at once

by raverbashing

1 subcomments

"hacked"
And then this person says the pin shouldn't be encrypted (but I bet if this was otherwise they would be complaining as well)
I think scrutiny over the apps are fine, but treating every issue with the same brush is not
> this product will be the catalyst for an enormous breach at some point
Breach of what exactly is not clear since most information never leaves the phone

by walletdrainer

0 subcomment

by spwa4

0 subcomment

Shows yet again: apps are secure because people check them. And politicians will avoid it at all costs for the same reason: it exposes them to being blamed for mistakes.

by onethingright

0 subcomment

by fvv

1 subcomments

There's one thing "the hackers" haven't considered, though! It's illegal to hack an app in the EU,
so the problem of bypassing age verification by hacking saved files doesn't arise at all!
/s