Back to News
Advertisement
Advertisement

⚡ Community Insights

Discussion Sentiment

50% Positive

Analyzed from 1666 words in the discussion.

Trending Topics

#linux#hardware#google#more#access#devices#device#anti#here#don

Discussion (29 Comments)Read Original on HackerNews

big85about 1 hour ago
All this ostensibly to keep teenage boys from watching Pornhub (when parental controls already exist).

The real reason, of course, is to force people to connect strong real-life identifiers to online activity. Mobile first, then Windows. Then Linux is too weak to oppose on its own, and will adapt or die.

jmyeet31 minutes ago
That's a completely unhelpful, overly simplistic straw man argument.

We restrict certain activities and places in the real world from certain people all the time. For example, not allowing people under 18 or 21 (depending on your country) into casinos. What we have now is essentially unrestricted access to pretty much anything and a fair assessment is that there is societal harm from that. We're creating gambling addicts (which is arguably the most harmful form of addiction), allowing predators to interact with children,, manipulating children through advertising and algorithms, flaming harmful behaviors like eating disorders, allowing mass cyberbullying and so on.

So saying "we should allow unfettered access to the internet" or even "it's the parents' responsibility" is naive, dismissive and has failed. The only question from here is what to d we do about it. You can say "nothing" but that's a losing argument.

I personally believe that the easiest thign to attack is advertising to minors. This will take away the financial incentive for these platforms to create addictive behaivors in minors. And most of these tech platforms have already built the infrastructure to do this. You don't allow advertisers to target an audience based on (actual or inferred) ages under 18. You extend that to proxies for age, like an interest in Minecraft. And you make advertising to children illegal.

Arguably, I'd go further and restrict certain features for minors, such as comments on Youtube and an algorithmic feed.

At the moment nobody is solving anything because it's simply a fight to move liability to someone else. Meta wants hardware vendors to be responsible because, guess what?, they have no hardware platform. Apple and Google likely want app to have to deal with it for the complete opposite reason.

I believe we should shift that liability to advertising.

jolmg17 minutes ago
> We restrict certain activities and places in the real world from certain people all the time. For example, not allowing people under 18 or 21 (depending on your country) into casinos.

These are not equivalent. Restricting access to a casino just requires showing an ID to a person. A few seconds later and that person has completely forgotten everything about you. They will not keep a record of your home address, etc. Perfectly privacy preserving. You have no such guarantee when you upload government IDs to a server.

I don't think anyone here minds restricting access, but that doesn't require completely destroying ownership rights over our own devices nor internet and device privacy.

All that really needs to be done is for servers to publish what type of content they show from a parental perspective in a machine-readable format and for devices to have parental controls that only allow access to servers that publish such info and which content is allowed by the parental settings.

This should be even more effective than solutions requiring uploading IDs since there's still going to be servers out there in other jurisdictions that simply don't care for such things.

akersten3 minutes ago
What's simplistic and unhelpful is falling for the narrative that infinite scroll, boobies, and algorithmic feeds are somehow more harmful than ubiquitous government surveillance of the most powerful communication tool on earth.

We can all agree that yeah sure this stuff isn't great, but that's the whole point of freedom. Fast food isn't great either but lawmakers aren't pushing for a junk food attestation framework to make sure you don't consume it more than twice a week. In other words, your best interest is not interesting to them at all. They are happy that you think it is somehow self evident that you subject yourself to undue surveillance through!

So, wonder why they're pushing for this so hard. I'll take the brainrot if it means criticism and ideas can spread without permanently being associated with a trackable, unchanging identity.

xg1523 minutes ago
What you're saying is correct - but it's used to push a much more comprehensive lockdown of devices that has absolutely nothing to do with protection of minors.

It's as if the government first let businesses install slot machines at every street corner, then suddenly went "I'm shocked, shocked! that we have a massive epidemic of gambling addiction here, we have to mandate anti-gambling shock collars for everyone to tackle this urgent problem! There is no alternative!"

catlikesshrimp12 minutes ago
>> "We're creating gambling addicts (which is arguably the most harmful form of addiction)" --- I will need a source, because "arguably" is a very broad umbrella.

"Arguably" heroin addiction is the most harmful addiction because heroin is the most addictive substance, clouds judgement and drives the addict to all manners of sociopathic behaviour (not only theft or prostitition)

jimbob459 minutes ago
Fentanyl, no?
afandianabout 2 hours ago
I don't understand where the all the EU anti-trust and anti-corruption regulators are here. _Governments_ enforcing that you have a Google or Apple account to participate in society is transparently absurd.

This isn't only a digital sovereignty issue, it's also an anti-competition issue.

mosuraabout 1 hour ago
The EU way is to think these things are “free” and then act surprised by the inevitable consequences five years later when it is irreversible.

Our AI gods cannot save us soon enough.

afandianabout 1 hour ago
What are the "AI gods" going to do in this scenario?

AI is about many things, but a big factor is enclosure.

petcatabout 1 hour ago
The reality of the matter is that it is virtually impossible for Europe to even begin to displace Apple or Google devices, and especially not operating systems and all the ecosystem that goes along with it.

The EU politicians are just publicly paying lip-service to "digital sovereignty" while they quietly hope this all just blows over when Trump is gone in 2 years.

afandian17 minutes ago
Agreed, I doubt that a mega-behemoth like Google or Microsoft could emerge in Europe. Especially not on a compressed timescale.

But if they really wanted digital verification without the surveillance capitalism built in, I’m sure there are plenty of companies that could do it. Especially if it was around an open source framework.

realusername42 minutes ago
> it is virtually impossible for Europe to even begin to displace Apple or Google devices

It's hard for sure but they are not even trying, the non-duopoly alternatives are run by hobbyists in their free time and just get shit on by EU bureaucrats

WhyNotHugoabout 2 hours ago
> Linux is not explicitly banned. Desktop Linux users could access a website and scan a QR code using a supported mobile wallet.

That's a weird way of putting it. You'll basically need a second non-Linux device if you want to use Linux.

If your reason for using Linux is "I want to continue using old hardware instead of quickly-obsoleted devices", then you're shit outta luck: you'll have to buy a (potentially second) device from one of those vendors who'll use the profits to further lobby against your rights.

Elfenerabout 2 hours ago
And it's not just desktop _linux_ that's not allowed, but any desktop operating system, since this only works with "smartphones" not general-purpose computers.

(and of course even if they were to support computers, an age/id verification system either won't work at all or only work to be abused by those in power)

afandianabout 1 hour ago
We need to remember how to operate without the Internet, and de-risk our dependence on it. Whether that's reducing the use of computers in our daily lives, or getting more open-source-software-runs-offline-on-my-machine.

We did it before. We forgot at the time when things were more-or-less free.

(I don't know how we do this. I'm as dependent as ever.)

big85about 1 hour ago
So much for the EU's mission to reduce e-waste.
teravorabout 1 hour ago
note that hardware attestation does not utilize ZKP or blind signatures. so your hardware ID is technically exposed.

usually to make use of the exposure multi-party collusion is required. Google or Apple attestation intermediaries (they convert your static certificate into an ephemeral one) would need to be logging information and when combined with information from the party you attested to (done with the ephemeral certificate) they will have your unique device identifier (the unchangeable certificate burned into the silicon).

it's doubly insidious because nothing is preventing the manufacturer from recording the certificate identifier and connecting it to an order ID for the device. so not only can they tie together multiple accounts, they could tie it to the identity that purchased the device.

on mobile devices you can't even restrict this functionality as it's exposed via API (remote attestation and also DRM license request handshake initiation). not even grapheneos gives you to option to disable it.

also, the implication of the above is that there is no private way to have a google account on an android phone. they will know it's you or the previous owner of the device who sold it to you (makes VPN irrelevant).

0xfedcafe21 minutes ago
Here comes the European freedom and free speech. With Chat Control it’s even more hilarious. Compliance list, another European Commission, as always.
buran77about 1 hour ago
> a maintainer confirmed that hardware-bound attestation is a mandatory architectural requirement

Hardware-bound is not a problem, limiting that to only iPhones and some Android phones is. Plenty of hardware can keep a key safe and it doesn't need Apple's or Google's blessing.

xg1535 minutes ago
> Linux is not explicitly banned. Desktop Linux users could access a website and scan a QR code using a supported mobile wallet.

Considering a significant part of the internet will be behind age verification gates, how are they imagining this to work? I should pull out my iPhone or Google Android phone and get its approval every time I want to visit a website?

ChrisArchitectabout 1 hour ago
Related:

European "age verification" "app" forcing everyone to use Android or iOS

https://news.ycombinator.com/item?id=48903777

Stop Killing the Internet: No Digital ID and No Age Verification

https://news.ycombinator.com/item?id=49084938

userbinatorabout 1 hour ago
I expect a gray/black market in TPM keys and the like will grow if this takes off, but hopefully the citizens will fight it very strongly before then...

...but then again, this is the EU, not the US.

83642736392about 1 hour ago
We need another French revolution that gets rid of this corrupt EU regime for good.
dijitabout 1 hour ago
It's very commonly the anti-EU politicians who inevitably get into EU parliament (due to representative voting, ironically more democratic than the FPTP system we use in the UK, despite all the wailing about democracy) who endorse such obviously stupid ideas, as a way to undermine the credibility of the EU.

What's frustrating is that it works really well, and occasionally they get something truly stupid through- which goes a long way to whipping up anti-EU sentiment, but then they're forcing their countries to actually do the stupid thing... Nobody seems to call out this self-sabotage.

razor-thinabout 1 hour ago
I suppose you have a lot of data backing this claim?

The head of the EU, Ursula von der Leyen, isn't known to be anti-EU.

dijitabout 1 hour ago
No head of government is going to come out against what the government itself is doing, they have to defend every initiative, which is why they seem pretty ungenuine all the goddamn always.

I used to track the voting history of UKIP members, the site "VoteWatch Europe" used to make this easy, but it shut down in 2022.

UKIP were constantly voting for things to be discussed (when they bothered to vote at all), and then when they were discussed they would thump chest in the media about how the EU was talking about doing the thing they had voted to discuss (with the verbiage to suggest the EU would definitely do it, against the will of the British- forgetting entirely that we had a veto anyway...).

sajithdilshanabout 1 hour ago
If it stick to its current trajectory it will implode in 10-20 years. France’s debt crisis will trigger Euro collapse and Germans would ditch Euro to not foot the bill for the French and the rest of the dominos would fall
TacticalCoderabout 1 hour ago
By an incredible coincidence, the (ex- ?) employee of a company known to lobby hard in the EU (Microsoft) and who's the author of a rube-goldberg kitchen sink many of you on HN loves so much (systemd), is now working on a system that's been described here as "an attack on general purpose computing". Attestations / Trusted Platform Module (TPM) / etc. are all in there:

https://news.ycombinator.com/item?id=46784572

How much do you love your systemd and the individual behind it now?

Can't wait to use your "amutable" Linux with hardware-bound attestation verifying your age now can you?

These people (the politicians behind such decisions, the people working on such platforms, those saying it's a good thing, ...) are enemies of freedom.

Advertisement