frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Parliament tells Dutch government to keep DigiD data out of American hands

https://nltimes.nl/2026/01/21/parliament-tells-dutch-govt-keep-digid-data-american-hands
96•TechTechTech•1h ago

Comments

jeroenhd•1h ago
Context: DigiD is the Dutch national infrastructure for authenticating to government (and semi-government) services. It's used for anything from doing taxes to checking the status of your pension.

The company that basically runs it for the government is being sold to an American investment company, which brings with it obvious national security risks.

debarshri•1h ago
It is kind of sticky situation for the country that is debating data sovereignty.
scalemaxx•1h ago
The key issue here and in many similar cases is for governments to define what they mean by sovereignty. Because if it means not only ownership but also keep it out of outsiders control then it means that governments will by necessity have to get involved in data ownership and data sharing arrangements of the companies that run and manage their systems. Trust is eroding quick.
AndrewDucker•54m ago
The company that runs it for the government, or the company who owns it for the government?

If the government owns the infrastructure, but outsources the day-to-day running to a company that's one thing. But if the infrastructure is owned by the third party then that's a lot harder to deal with.

bossyTeacher•41m ago
> If the government owns the infrastructure, but outsources the day-to-day running to a company that's one thing

This is still very problematic. To be honest, even using foreign hardware or propietary software is problematic. But you should reduce dependence as much as possible because it is a huge vector that should the foreign government decide to turn on you openly or secretly, it could bring you down before you have a chance to detect what is happening. I believe wars between developed countries will operate at this level (i.e. by targeting foreign dependency chains whether it be national systems for id or simply cutting undersea cables)

AndrewDucker•36m ago
I agree that it's still problematic. But you can recover from that by hiring your own staff and slowly taking over the running of the system. No doubt there would be issues, but it would be doable.

Recovering from "Your critical national infrastructure is physically owned by someone else" is much trickier.

graemep•25m ago
Are there not already risks that exist from it relying on US run devices?
Fnoord•2m ago
[delayed]
Cthulhu_•1m ago
[delayed]
shevy-java•1h ago
Now someone needs to convince the german government too. For some reason Merz says one thing but then acts in an orthogonal, US-serving manner. People in Germany have started to notice this too. Something is not working here for Merz - there is a disconnect between what he says and what he does.
TheChaplain•58m ago
I may be too cynical but when it comes to politicians, the disconnect feels more than a rule than exception.

It is hard to vote, being buttered up with promises and pretty speeches, just to be disappointed halfway to next election.

aa-jv•52m ago
Germans forget too easily that theirs is a vassal state without full sovereignty.

Until the German people can investigate and prosecute their own intelligence services, this situation will not change. That the German intelligence services answer to the CIA is a travesty for the German people.

Anyone wondering about Merz' servitude should keep this in mind.

Angostura•44m ago
Could it not be as simple as aspiration (we want to move to digital sovereignty) versus pragmatism (we need to implement this thing next month)?
awesan•1h ago
A lot of Dutch government and government adjacent services run on Microsoft Azure as well. Which is not the same level of concern, but it does mean the US government has access to that data.
michh•59m ago
even if they don't have access to the actual data, the US government has the option to order Microsoft to switch these essential government services services off. For example, as a means of pressuring the Dutch government into supporting the American annexation of Greenland.

Or even, post-Greenland, to force the Dutch to give Trump the Dutch Caribbean islands off the Venezuelan coast as well (Aruba, Bonaire, Curaçao).

If I were a Dutch member of parliament, I would be insisting this particular vulnerability to extortion be addressed as soon as possible. Of course, the US can still threaten to, at worst, nuke us all to smithereens but let's hope they're not willing to go that far.

NoahZuniga•55m ago
Note: legally, the Netherlands can't give Aruba or Curaçao to the US as in the constitutional framework of the dutch kingdom they are seen as sovereign entities.
usrnm•52m ago
Bonaire then?
NoahZuniga•41m ago
Bonaire is a special municipality of the Netherlands, so I think they could give that away.
michh•43m ago
I'm aware. I just think the Trump administration would say "Do it anyway".
teekert•47m ago
Which has happened before and is the reason why the International Criminal Court is moving away from MS365 [0]

This prompted me to try OnlyOffice, and man is that nice. I do like LibreOffice, but 2 things bug me: It just looks old. And second, I have, since the dawn of time (and the Sun's Star Office) had issues just telling the software: "This is a Dutch doc, apply Dutch spelling and Grammar Checks". It has never worked well, even Firefox text fields work better. But with OnlyOffice it seems to work well so far, and also, it will be much much more recognizable by ex-MS Office users. It hear the interop with MS formats is also better.

[0] https://www.techspot.com/news/110095-international-criminal-...

graemep•24m ago
> the US government has the option to order Microsoft to switch these essential government services services off

They can also order MS and Amazon and Google and Apple to switch off services on which most of the economy relies, and which most devices require to function.

WhereIsTheTruth•42m ago
The US CLOUD Act mandates American companies to provide data to US authorities, even when stored abroad

Whoever gives US Big Tech access to their digital infrastructure is a foreign spy and should be jailed

Confiks•37m ago
Solvinity (now acquired by Kyndryl) owns and runs a lot of the underlying infrastructure of DigiD, but the application itself and the day-to-day operations are handled by an autonomous body of the government (Logius). DigiD is mainly about translating authentication factors into a social security number (BSN) for authentication to other public institutions.

That allows Logius to pretend it's not much of a problem, and Solvinity maintains (in an unusually sharp and on-point interview) that all data is "encrypted" [1], without mentioning who possesses the keys or whether encryption is relevant at all. They go on to say that they consider the scenario of the US shutting down DigiD "very hypothetical", that they will follow Dutch law and that they have a strong supervisory board (as if that would matter).

Logius also operates MijnOverheid, which collates very sensitive information about all citizens from most government agencies and also relies on Solvinity infrastructure.

The infrastructure that Solvinity maintains goes far beyond servers, as they've concocted themselves an unholy procurement mess with their PICARD / LPC solution (Logius Private Cloud). They were advised multiple times over multiple years by the main advisory body on IT of The Netherlands (AcICT) not to do it in this way and KISS, but then did it anyway.

The intent of structuring it in this way was that it would be easier to switch infrastructure providers, but the outcome is the exact opposite: there is now a non-standard "integration layer" that would need to be rebuilt. Which is exactly what AcICT warned about from the beginning.

You can find a diagram of the responsibilities on both the Solvinity and Logius side on the last page of [2] (in Dutch).

The wild thing is that Logius also owns and maintains "Standaard Platform" [3], which is a very neat and standard Kubernetes environment, but they declined to use this for DigiD and MijnOverheid because they didn't deem it secure enough, and instead of securing their Kubernetes deployment, they went on with PICARD / LPC.

Logius is an autonomous body of the Ministry of the Interior (BZK), but they appear to have completely lost control over setting any policy and now mainly walk from crisis to crisis because any opening on their "SAFe train" is years away.

[1] https://www.nrc.nl/nieuws/2025/12/03/baas-van-solvinity-prob...

[2] https://www.adviescollegeicttoetsing.nl/site/binaries/site-c...

[3] https://www.logius.nl/onze-dienstverlening/infrastructuur/st...

sam_lowry_•15m ago
Thanks for the detailed explanation. I attempted something similar for Belgium here: http://mikhailian.mova.org/node/297

While federal government in Belgium is slightly less dependent on US clouds, Digital Vlaanderen is pretty much in bed with Microsoft on all levels.

fithisux•19m ago
DigID is already something dangerous, trading hands is not gonna reduce the danger.

Going back to old school services is doable and safe as long as governments are interested for the security of citizens.

dev1ycan•4m ago
Linkedin asked me for my ID to "verify" I refused, if it ever becomes mandatory I stop using it altogether.
clickety_clack•1m ago
Creating a database of their citizens using a private company has opened up exactly the kind of privacy problems that anyone on here could have expected. Maybe they should just use GDPR to delete the data before it’s exfiltrated?

Devices Target the Gut to Maintain Weight Loss from GLP-1 Drugs

https://spectrum.ieee.org/weight-loss-devices
1•sohkamyung•18s ago•0 comments

How to Emulate a C64 Modem and Dial a BBS Using Vice

https://retrogamecoders.com/vice-c64-modem-emulation/
1•ibobev•31s ago•0 comments

Why Cowork Can't Work

https://benn.substack.com/p/why-cowork-cant-work
1•indigodaddy•52s ago•0 comments

The Messy Human Drama That Dealt a Blow to One of AI's Hottest Startups

https://www.wsj.com/tech/ai/the-messy-human-drama-that-dealt-a-blow-to-one-of-ais-hottest-startup...
1•impish9208•1m ago•1 comments

I'm 20 and built trinith after losing mass money to confirmation bias

https://trinith-ai.vercel.app
1•rvnx_exe•2m ago•1 comments

Ted J Kaczynski

https://en.wikipedia.org/wiki/Ted_Kaczynski
1•nothrowaways•2m ago•0 comments

Crans-Montana fire bar had safety issues for years

https://www.swissinfo.ch/eng/various/crans-montana-authorities-informed-about-offences-in-the-bar...
1•cumo•2m ago•0 comments

Executive order barring Wall Street investors from buying single-family homes

https://thehill.com/homenews/administration/5698163-trump-executive-order-wall-street-single-fami...
1•csa•2m ago•0 comments

Building a Better Golang Linker

https://docs.google.com/document/d/1D13QhciikbdLtaI67U6Ble5d_1nsI4befEd6_k1z91U/mobilebasic
1•fanf2•3m ago•0 comments

Building a Blog in Gleam

https://gearsco.de/blog/blog-in-gleam/
1•todsacerdoti•3m ago•0 comments

Show HN: I Dare You. Create a Dare. Set a Price. Accept or Reject

https://idareyou.vercel.app/
1•pelmenibenni•4m ago•0 comments

Tsexec: Run a command inside your Tailnet without root

https://bou.ke/blog/tsexec/
1•bouk•4m ago•0 comments

Why VIPER and MVVM in SwiftUI are the same pattern

https://matteomanferdini.com/mvvm-vs-viper/
1•DeusExMachina•4m ago•0 comments

Creative talent: has AI knocked humans out?

https://nouvelles.umontreal.ca/en/article/2026/01/20/creative-talent-has-ai-knocked-humans-out
2•geox•5m ago•0 comments

Mental Models for Debugging Hard Problems

https://leomax.fyi/blog/mental-models-for-debugging-hard-problems/
1•MaxMussio•5m ago•0 comments

Show HN: Trading cards for learning – 16 albums, 2.7k cards, learn by collecting

https://tradingpicturecards.com/
1•Manuel_TPC•5m ago•1 comments

The EU Commission Is Gutting Net Neutrality

https://epicenter.works/en/content/the-eu-commission-is-gutting-net-neutrality
1•wtfishackernews•5m ago•0 comments

Membranes

https://encyclopedia.che.engin.umich.edu/membranes/
1•o4c•6m ago•0 comments

Unsealed: Spotify Lawsuit Triggered Anna's Archive Domain Name Suspensions

https://torrentfreak.com/unsealed-spotify-lawsuit-triggered-annas-archive-domain-name-suspensions/
3•t-3•10m ago•0 comments

Ask HN: Is retreq / retspec a thing?

2•foobarbecue•11m ago•0 comments

100 Years – Harvesting Ice

https://trianglex.com/blog/100-years-harvesting-ice/
1•eightturn•11m ago•0 comments

NASA to end support for planetary science groups

https://spacenews.com/nasa-to-end-support-for-planetary-science-groups/
1•defrost•12m ago•0 comments

Boss wants me to post too often

https://amplift.ai/
2•our79511•12m ago•1 comments

Cloudflare Sandbox SDK

https://developers.cloudflare.com/sandbox/
2•tosh•12m ago•0 comments

Get to Grips with Transformers and LLMs

https://www.i-programmer.info/news/150-training-a-education/18604-watch-stanfords-cme295-transfor...
2•aquastorm•12m ago•0 comments

The Biggest Disclosure Day in Biotech

https://rxdatalab.com/research/jpm-healthcare-8k-analysis/
2•nnmg•13m ago•0 comments

The Ironies of artificial intelligence (2023)

https://safetyinsights.org/2024/01/09/the-ironies-of-artificial-intelligence/
2•internet_points•14m ago•0 comments

We scanned DNS TXT records for the Fortune 500 and here's what they exposed

https://dnsaudit.io/blog/dns-txt-records-exposure-fortune-500
3•shakauy•17m ago•1 comments

Show HN: Safest, Fastest, Easiest, and Most Advanced Python HTTP Client

https://github.com/jawah/niquests/blob/v3.17.0/README.md
2•mesahm•17m ago•1 comments

Ovi AI

https://ovi-ai.org/
3•Nano-Banana-Pro•19m ago•0 comments