troitregrouloinu

@EUCommission@ec.social-network.europa.eu "high level of privacy" while pushing for total surveillance with ChatContol !? Are you serious?

@elena@aseachange.com the goal of Age Verification is to force hardware remote attestation everywhere, meaning a device that does not run an OS "blessed" by the state will be unable to access internet This fits well with ChatContol : if ChatContol was accepted, it would need to scan locally my messages. But then I could simply patch / remove the line of code that scans my messages. With Hardware Remote Attestation they ensure only OS "blessed" by the state can run, and those OS will implement ChatContol

@GrapheneOS@grapheneos.social I'm a daily user of GrapheneOS and love it, but services adding GrapheneOS keys is barely a better situation, it is still massively anticompetitive. GrapheneOS criticizes the e/os/ UnifiedAttestation cartel, but pushes for the same thing? Remote Hardware Attestation has nothing to do with actual security (verified boot has). The solution is not technical, it's political, we need to ban Remote Hardware Attestation. Maybe under some Anticompetitive laws we could have a chance?

@denzilferreira@techhub.social And let's be crystal clear, hardware remote attestation is for anti-competitivity and control, this has nothing to do with security. It is different from "local verified boot" which is great (avoids evil maid attack, GrapheneOS has it, SystemD soon to).

If EU wants to ensure only secure devices are sold in EU they should set standards (regular security updates, mandatory app sandboxing, etc.) like for any other product. But using Remote Attestation is completely dystopian.

@denzilferreira@techhub.social This 100%. The real name of this evil is "Device Hardware Remote Attestation". IOS have their own version, not only Google. Anything else we could deal with by reimplementing the API as other did (Steam's Proton for Windows app, Anbox/Waydroid for Android app, etc.). But this, this is the end game. The real agenda of EU age verification is to inject remote attestation everywhere, effectively banning you from society if you change a single line of code on your device.