Hacker Newsnew | past | comments | ask | show | jobs | submit | Mindwipe's commentslogin

You won't pass Google Play hardware attestation that way, and you won't find a bank in Europe or the UK that doesn't require that to log on to their website within five years.

My bank works fine after relocking (in NL, Europe). And last time I checked all Dutch banks work. My VISA credit card app (from ICS) also works. Same for the government identification app, the government message app, our insurance app. In fact, I haven't encountered anything outside of Google Pay that didn't work.

(I don't deny that there are apps that won't work. Best to check before switching full-time.)


That's a prediction I would disagree with. Firstly, there are application developers which specifically add support for GrapheneOS if they are asked nicely. Secondly, there is a chance that Play Integrity will have to change due to anti-trust regulation.

You pass basic, but not device or strong integrity. This is purely googles fault and is an artificial limitation that requires regulatory restrictions.

The DSA European digital wallet spec currently requires Google or Apple attestation, so not for much longer.

And that is mandated by the EU.


Sigh.

Reputational awareness is what keeps people safe!

Given the Times and the Guardian are British they will be archived by the British Library, as it's a legal obligation.

That doesn't mean anything American library that doesn't pay authors Public Lending Right fees gets to.


Just fucking revert the UI at this point. It's a disaster on macOS.

I'll believe it when I see it. Windows many problems are the results of five years of terrible strategy and not caring about if users actually like your platform. It will require sustained effort over a long period to fix.


There is no such thing in practice.

Anything with zero knowledge is never going to be considered robust enough by a government. Zero knowledge protocols really have no functional revocation mechanism.


The EU has been working on a zero knowledge system as part of the EU Digital Identity Wallet project for a few years now. It is currently undergoing large scale field tests in several countries with expected release late this year. All member states are required to provide at least one free secure interoperable implementation to their citizens, and regulated industries such as banks and telecoms, are required to accept it. If a member state passes a law requiring age verification on social media it must include the EU Digital Identity Wallet as one of the verification methods the site must support.

What was that about no government would consider zero knowledge to be robust enough?


Which of these governments do you trust? The same governments, mind you, that are working diligently to end anonymity on the Internet.


Introducing a solid zero-knowledge age verification option is the opposite direction of ending anonymity in the Internet, which other parts of the same governments are also working on.

So yeah, I'll gladly trust and cheer on the part working in the right direction.


The EU Digital Identity Wallet isn't zero knowledge. I mean it's just not. It relies on Google Play Integrity Attestation on Android and the iOS equivalent on Apple devices because those give it a revocation mechanism, and those aren't zero knowledge.

https://github.com/eu-digital-identity-wallet/av-doc-technic...

It says that it wants to be zero knowledge, but it has no zero knowledge implementation and no plan of how it even possibly could be zero knowledge, and it never will precisely because that is incompatible with the revocation requirements set down by the EU.


Same EU that wants to ban encryption?


(Without accepting the premise that it should be acceptable to have to provide any kind of proof...)

> Zero knowledge protocols really have no functional revocation mechanism.

None would be needed, you (sadly) only age in one direction, so valid proof would never become invalid proof.


>valid proof would never become invalid proof

Somebody can give their proof of age to another person.


And? Presentation of someone else's valid credentials is not fixable by any privacy-preserving mechanism. You can set an expiration date in order to rotate them, and they can be fast-rotating.

In any case, it's a moot point: the correct amount of required identification is zero.


> Presentation of someone else's valid credentials is not fixable by any privacy-preserving mechanism.

And that is precisely why governments will never implement a privacy-preserving mechanism, which is exactly my point.

Compromised tokens would be trivially google-able within a day otherwise.


expiry


I mean the main reason it exists is because. Nvidia spent a bunch of money designing and fabbing the Tegra for automotive use and nobody bought it so the project was desperate to find a customer rather than out of the goodness of their hearts. That's also why they sold it to Nintendo at a bargain basement price for the Switch.

I strongly suspect the reality is that they had to give Nintendo so much money back due to the complete failure of the bootloader security that they still produce the Shield as Jensen still demands they claw their way back to break even.


Unless Valve are going to do some work to enable that and support a hardware backed chain of trust for drivers that's not going to happen.

(I think it should happen but that's not the same as that it will.)


That would be great, honestly. Imagine just being able to install Android apps like Netflix, Disney+, ... On your Steam Deck or Steam Machine and having it work out of the box with Widevine L1. Then you'd truly just only need one device attached to your TV for all your entertainment needs. And then a great and supported one at that.


The drivers are already done, they're in the Android build.

I just want a more open OS.

I don't mind if it requires running a vendor signed boot, kernel and driver chain, I'd be using those same vendor chains anyway for non upstreamed hardware most likely.


It's symbolism unless planting a stooge to lower interest rates below any economic justification in April causes a significant slide on the dollar's value. In which case its a great investment move.


Wow, there'll be entire categories of product that it will be worth buying from Amazon again.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: