frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

EU Age Verification Project Mandates Hardware-Bound Attestation

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
51•RobotToaster•1h ago

Comments

WhyNotHugo•1h ago
> Linux is not explicitly banned. Desktop Linux users could access a website and scan a QR code using a supported mobile wallet.

That's a weird way of putting it. You'll basically need a second non-Linux device if you want to use Linux.

If your reason for using Linux is "I want to continue using old hardware instead of quickly-obsoleted devices", then you're shit outta luck: you'll have to buy a (potentially second) device from one of those vendors who'll use the profits to further lobby against your rights.

Elfener•1h ago
And it's not just desktop _linux_ that's not allowed, but any desktop operating system, since this only works with "smartphones" not general-purpose computers.

(and of course even if they were to support computers, an age/id verification system either won't work at all or only work to be abused by those in power)

afandian•31m ago
We need to remember how to operate without the Internet, and de-risk our dependence on it. Whether that's reducing the use of computers in our daily lives, or getting more open-source-software-runs-offline-on-my-machine.

We did it before. We forgot at the time when things were more-or-less free.

(I don't know how we do this. I'm as dependent as ever.)

big85•22m ago
So much for the EU's mission to reduce e-waste.
afandian•59m ago
I don't understand where the all the EU anti-trust and anti-corruption regulators are here. _Governments_ enforcing that you have a Google or Apple account to participate in society is transparently absurd.

This isn't only a digital sovereignty issue, it's also an anti-competition issue.

mosura•50m ago
The EU way is to think these things are “free” and then act surprised by the inevitable consequences five years later when it is irreversible.

Our AI gods cannot save us soon enough.

afandian•33m ago
What are the "AI gods" going to do in this scenario?

AI is about many things, but a big factor is enclosure.

petcat•19m ago
The reality of the matter is that it is virtually impossible for Europe to even begin to displace Apple or Google devices, and especially not operating systems and all the ecosystem that goes along with it.

The EU politicians are just publicly paying lip-service to "digital sovereignty" while they quietly hope this all just blows over when Trump is gone in 2 years.

realusername•10m ago
> it is virtually impossible for Europe to even begin to displace Apple or Google devices

It's hard for sure but they are not even trying, the non-duopoly alternatives are run by hobbyists in their free time and just get shit on by EU bureaucrats

buran77•53m ago
> a maintainer confirmed that hardware-bound attestation is a mandatory architectural requirement

Hardware-bound is not a problem, limiting that to only iPhones and some Android phones is. Plenty of hardware can keep a key safe and it doesn't need to Apple's or Google's blessing.

83642736392•51m ago
We need another French revolution that gets rid of this corrupt EU regime for good.
dijit•46m ago
It's very commonly the anti-EU politicians who inevitably get into EU parliament (due to representative voting, ironically more democratic than the FPTP system we use in the UK, despite all the wailing about democracy) who endorse such obviously stupid ideas, as a way to undermine the credibility of the EU.

What's frustrating is that it works really well, and occasionally they get something truly stupid through- which goes a long way to whipping up anti-EU sentiment, but then they're forcing their countries to actually do the stupid thing... Nobody seems to call out this self-sabotage.

razor-thin•44m ago
I suppose you have a lot of data backing this claim?

The head of the EU, Ursula von der Leyen, isn't known to be anti-EU.

dijit•27m ago
No head of government is going to come out against what the government itself is doing, they have to defend every initiative, which is why they seem pretty ungenuine all the goddamn always.

I used to track the voting history of UKIP members, the site "VoteWatch Europe" used to make this easy, but it shut down in 2022.

UKIP were constantly voting for things to be discussed (when they bothered to vote at all), and then when they were discussed they would thump chest in the media about how the EU was talking about doing the thing they had voted to discuss (with the verbiage to suggest the EU would definitely do it, against the will of the British- forgetting entirely that we had a veto anyway...).

sajithdilshan
teravor•48m ago
note that hardware attestation does not utilize ZKP or blind signatures. so your hardware ID is technically exposed.

usually to make use of the exposure multi-party collusion is required. Google or Apple attestation intermediaries (they convert your static certificate into an ephemeral one) would need to be logging information and when combined with information from the party you attested to (done with the ephemeral certificate) they will have your unique device identifier (the unchangeable certificate burned into the silicon).

it's doubly insidious because nothing is preventing the manufacturer from recording the certificate identifier and connecting it to an order ID for the device. so not only can they tie together multiple accounts, they could tie it to the identity that purchased the device.

on mobile devices you can't even restrict this functionality as it's exposed via API (remote attestation and also DRM license request handshake initiation). not even grapheneos gives you to option to disable it.

also, the implication of the above is that there is no private way to have a google account on an android phone. they will know it's you or the previous owner of the device who sold it to you (makes VPN irrelevant).

ChrisArchitect•43m ago
Related:

European "age verification" "app" forcing everyone to use Android or iOS

https://news.ycombinator.com/item?id=48903777

Stop Killing the Internet: No Digital ID and No Age Verification

https://news.ycombinator.com/item?id=49084938

userbinator•30m ago
I expect a gray/black market in TPM keys and the like will grow if this takes off, but hopefully the citizens will fight it very strongly before then...

...but then again, this is the EU, not the US.

big85•17m ago
All this ostensibly to keep teenage boys from watching Pornhub (when parental controls already exist).

The real reason, of course, is to force people to connect strong real-life identifiers to online activity. Mobile first, then Windows. Then Linux is too weak to oppose on its own, and will adapt or die.

TacticalCoder•12m ago
By an incredible coincidence, the (ex- ?) employee of a company known to lobby hard in the EU (Microsoft) and who's the author of a rube-goldberg kitchen sink many of you on HN loves so much (systemd), is now working on a system that's been described here as "an attack on general purpose computing". Attestations / Trusted Platform Module (TPM) / etc. are all in there:

https://news.ycombinator.com/item?id=46784572

How much do you love your systemd and the individual behind it now?

Can't wait to use your "amutable" Linux with hardware-bound attestation verifying your age now can you?

These people (the politicians behind such decisions, the people working on such platforms, those saying it's a good thing, ...) are enemies of freedom.

•
13m ago
If it stick to its current trajectory it will implode in 10-20 years. France’s debt crisis will trigger Euro collapse and Germans would ditch Euro to not foot the bill for the French and the rest of the dominos would fall

Karpathy’s Pelican

https://twitter.com/karpathy/status/2083749667410727319
338•delichon•18h ago•270 comments

Show HN: Kakehashi – Experimental userspace to run macOS binaries on Linux ARM

https://github.com/wie-project/kakehashi
137•vlad_kalinkin•5h ago•34 comments

Note-Taking and Personal Knowledge Management

https://unattributed.cc/note-taking-and-personal-knowledge-management
71•surprisetalk•5d ago•21 comments

My personal AI benchmark: "Generate an SVG of a frog with a Habsburg jaw."

https://frogs.vaguespac.es/
61•thebigship•2h ago•35 comments

Sharing an X11 Server Across Hosts with FamilyWild

https://dobrowolski.dev/article/sharing-an-x-server-across-hosts-with-familywild/
16•shirozuki•1h ago•3 comments

Developers are attached to tools because tools encode trust

https://stackoverflow.blog/2026/07/29/developers-are-attached-to-tools-because-tools-encode-trust/
103•HieronymusBosch•4d ago•50 comments

Show HN: NixOS-DGX-Spark – Nix and NixOS on the DGX Spark

https://github.com/graham33/nixos-dgx-spark
77•graham33•5h ago•19 comments

Show HN: Make your Framework 12 sound like a creaky door

https://github.com/ArcaEge/creakwork12
18•arcaege•1h ago•2 comments

F*: A general-purpose proof-oriented programming language

https://fstar-lang.org/
135•ducktective•9h ago•59 comments

Twenty Years of RISC OS Open

https://www.riscosopen.org/news/articles/2026/06/20/twenty-years-of-risc-os-open
141•AlexeyBrin•9h ago•24 comments

Harvesting SSH Credentials: Insights from My Honeypot Network

https://uphillsecurity.com/articles/harvesting-ssh-credentials-insights-from-my-honeypot-network/
30•whatbackup•4h ago•23 comments

Read the Novels and Forget Everything Else

https://hedgehogreview.com/web-features/thr/posts/read-the-novels-and-forget-everything-else
8•samclemens•1d ago•0 comments

When transit passes were designed by hand (2022)

https://letterformarchive.org/news/milwaukee-transit-passes/
82•nate•2d ago•26 comments

'Crush this lady': how eBay harassment campaign led to $56M payout

https://www.ft.com/content/06ec1b03-d4af-40cf-b12a-4ba5a410f6d2
112•JumpCrisscross•3h ago•44 comments

Rooting, firmware analysis and persistent credentials of TP-Link TL-841N

https://blog.juni-mp4.com/posts/42/rooting-the-tplink-tl841n-pt1/
70•mindracer•6h ago•12 comments

EU Age Verification Project Mandates Hardware-Bound Attestation

https://linuxiac.com/eu-age-verification-project-mandates-hardware-bound-attestation/
57•RobotToaster•1h ago•21 comments

Meshdiff – visually compare two STL versions in the browser, client-side

https://meshdiff.com/
166•projscope•10h ago•17 comments

TinyNES Review – A Super Niche NES Console

https://blog.lon.tv/2023/02/05/tinynes-review-a-super-niche-nes-console/
7•throwoutway•2h ago•0 comments

Fasttracker II clone in C using SDL 2

https://16-bits.org/ft2.php
107•andsoitis•4d ago•36 comments

Schmitt Trigger: Robust Comparator Design with Hysteresis

https://www.wevolver.com/article/schmitt-trigger-robust-comparator-design-with-hysteresis
11•ankitg12•3d ago•6 comments

The Myth of Snow Leopard

https://www.rubenerd.au/the-myth-of-snow-leopard/
20•speckx•4h ago•14 comments

Folding Paper Globes

https://foldingglobes.com/globes
131•dango2506•4d ago•28 comments

Adding Go's Defer to the TypeScript Compiler

https://healeycodes.com/adding-defer-to-the-typescript-compiler
10•healeycodes•2h ago•2 comments

Let the machines in

https://blog.semenzin.com/let-the-machines-in/
18•lluvt•2h ago•7 comments

How the words we teach English language learners changed

https://pudding.cool/2026/07/essential-words/
179•c-oreills•6h ago•109 comments

Show HN: MicroCodex Coding Agent – OpenAI/codex reimplemented in C++ <1MB binary

https://github.com/paoloanzn/microcodex
9•paoloanzn•2h ago•2 comments

Great Question (YC W21) Is Hiring Senior Demand Gen Manager

https://www.ycombinator.com/companies/great-question/jobs/YutDxyf-senior-demand-generation-manager
1•nedwin•10h ago

Show HN: Bor – Open-source policy management for Linux desktops

https://getbor.dev/blog/2026-08-02-bor-v080-release/
161•eniac111•13h ago•20 comments

Show HN: Fuse – statically typed functional programming language

https://fuselang.org
99•the_unproven•11h ago•27 comments

Artificial Intelligence: Ars Notoria and the Promise of Instant Knowledge

https://publicdomainreview.org/essay/ars-notoria/
118•jruohonen•12h ago•28 comments