9 ms·

"Device security checks" is the most horrifying aspect as it basically means "officially sanctioned hardware and software", and leads straight into the dystopia

"Device security checks" is the most horrifying aspect as it basically means "officially sanctioned hardware and software", and leads straight into the dystopia that Stallman warned us about in Right to Read. There is some amusing irony in the EU relying on the US for furthering its own authoritarianism. It's unfortunate that freedom (in the classic rebellious, American sense) never became that popular in the EU, or for that matter, the UK.

nextos 1y ago
> leads straight into the dystopia that Stallman warned us about IMHO, the push for age verification is just a stepping stone towards requiring a mandatory ID for all social media posts made from EU. Given the current trends against freedom of speech, it's not unreasonable to think that by the end of the decade any site, including HN, might need to link usernames with their respective eIDs in case posts come from EU IP addresses. > officially sanctioned hardware and software Right now, if you want to run an alternative OS, it's already an uphill battle to use tons of member state services, as well as to do banking. Even if you have microG available, the situation is terrible. I imagine it's going to become harder. I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard, reinforcing the mobile duopoly. In this context, free alternative mobile platforms, such as Sailfish, cannot flourish.
- tonyhart7 1y ago
  "a mandatory ID for all social media posts made from EU. Given the current trends against freedom of speech" what?? how is this againt freedom of speech???, south korea implement this ages ago and there is nothing like that
  - userbinator 1y ago
    https://en.wikipedia.org/wiki/Internet_censorship_in_South_Korea https://en.wikipedia.org/wiki/Internet_censorship_in_South_K... I wouldn't consider South Korea as having any meaningful freedom of speech; in fact they seem closer to China than the EU.
  - numpad0 1y ago
    SK had this, and it appeared to have turned their entire WWW into 4chan with cult radicalisms. Their state of online speeches and its real world negative consequences are crazy. People on permanent records in real name never backs down because they more tangibly feel their mistakes as threats, and if you think about it, people who never backs down even if they are in wrong are effectively cultists. It's clear what these types of totalitarianism do and where this path ends. It's crazy EU don't get that.
    - tonyhart7 1y ago
      lol. its echo chamber on internet if you talk to people directly, no one said that
      - numpad0 1y ago
        Every cultures has echo chambers, I'm talking about which one is the worst and which parts of laws are likely fueling it
- yorwba 1y ago
  There's not a trend against freedom of speech so much as existing laws outlawing certain categories of speech being applied to the internet. If you lie in a commercial context, that's fraud; if you lie in court, that's perjury; if you tell your buddies to go do crimes together, that's conspiracy to commit; if you tell someone to give you money or else, that's blackmail... If you come from the perspective that there used to be freedom of speech and now there's all those pesky laws restricting what you can say, it looks like a slippery slope. If you realize that people have been required to check ID when selling material unsuitable for minors in physical stores since before the internet existed, it seems a bit more unlikely that ID requirements will expand to cover everything else.
  - mytailorisrich 1y ago
    There is no "freedom of speech" in the US sense in the EU/UK. That's often a cause for misunderstanding between the two sides of the Pond. There are many things that you are not allowed to write or say by law in EU countries simply because the legislator has decided that they are wrong opinions, and it is generally accepted that the State can and should implement such controls. Note that lying is not a crime in general. Your examples are for very specific contexts.
    - af78 1y ago
      That's a common misconception. The European Convention on Human Rights guarantees freedom of expression https://en.wikipedia.org/wiki/European_Convention_on_Human_Rights#Article_10_%E2%80%93_expression https://en.wikipedia.org/wiki/European_Convention_on_Human_R... and is legally binding in all member states. Sure, there are exceptions but in the USA too freedom of speech is not absolute either. Moreover, in practice, there is more freedom of speech in most EU countries than in the USA https://ourworldindata.org/grapher/freedom-of-expression-index https://ourworldindata.org/grapher/freedom-of-expression-ind...: USA: 0.89 France: 0.96 Germany: 0.94 Czechia: 0.96 etc.
      - mytailorisrich 1y ago
        Including things like "media bias" and other dubious criteria in freedom of speech rankings is obviously skewed. Whatever the ECHR might say what I wrote in my previous comment is factual. In Europe "freedom of speech" comes with a long list of small print. In fact, this is so embedded that the article of the ECHR you quote provides for restrictions and even states that they are "necessary": "subject to certain restrictions that are "in accordance with law" and "necessary in a democratic society"." QED
- swiftcoder 1y ago
  > I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard It seems to be different branches of the EU? This has been a recurring problem in EU tech legislation - the EU government bodies are sufficiently autonomous that the right hand seldom knows what the left is doing...
  - lynx97 1y ago
    "right hand" pretty nicely fits. The EU/EVP is much more conservative/right wing then many of its citizens are prepared to accept. Its a pretty nice propaganda-machinery that made this possible. Ask a random EU citizen if they are aware that conservatives are leading the EU since 30 years... You'll be surprised.
    - pantalaimon 1y ago
      The current push for more censorship is a left talking point though
      - andrepd 1y ago
        Yeah right... That's why the left wing parties in the EP voted against and the conservatives / neoright parties voted in favour of censorship. -.-
  - SirHumphrey 1y ago
    To quote Yes, Minister: > Hacker: One of your officials pays farmers to produce surplus food, while on the same floor, the next office is paying them to destroy the surpluses. > Maurice: That is not true! > Hacker: No? > Maurice: He is not in the next office, not even on the same floor!
  - qcnguy 1y ago
    They aren't autonomous at all though. All EU law comes from the Commission, which is a singular body run by a single appointed president, with everyone reporting directly to her. The Commission answers to nobody and the Parliament can't tell it what to do, just rubberstamp what it produces. This is the best case scenario for coherency in law making. It's designed to be as undemocratic as possible, so there's no need to make compromises or engage in pork barrel politics to get stuff over the line. The incoherency of the EU's approach is just a consequence of the incoherent thinking coming from the top. The EU always has extremely powerful but very low competency presidents, always for some reason those who were failures at national politics.
- miohtama 1y ago
  VPN ban is coming next.
  - miohtama 1y ago
    VPN ban coming now in the UK https://news.ycombinator.com/item?id=44722216 https://news.ycombinator.com/item?id=44722216
- kubb 1y ago
  I would honestly love that. No more paid trolls on social media, the democratic process has a chance to adapt to technology, we can avoid the fate of the US.
  - exe34 1y ago
    Only until the next Reichstag fire, I suspect, because by then there won't be any more democracy.
    - kubb 1y ago
      Can you phrase your thought as a causal chain so that I don’t have to guess what you mean?
      - BiteCode_dev 1y ago
        In the 1930s, the Dutch government conducted a census that included religion. The Netherlands, after all, had a comprehensive population registry system (Bevolkingsregister) established in the 19th century. This registry was centralized, continuously updated, and included religion, addresses, family connections, and occupations. After the German occupation in 1940, the Nazis accessed and exploited the Dutch population registry, including religious affiliation. About 75–80% of the ~140,000 Jews in the Netherlands were killed. This is the highest percentage in Western Europe. Compare that to France, which had a more fragmented administrative system, and less complete central records and 25% of Jews in France were deported and killed — a much lower percentage than the Netherlands. As usual, when reaching the Godwin point, the idea is not for you to take it at face value, but to extrapolate to your situation. The concentration of power and centralized people tracking are eventually always abused, and once your system becomes less free (which has historically eventually happened on a long enough timescale), you will pay the price for it. In our case, having a full history of all opinions, interactions, locations, and behavior linked to full identity of people is what we are ultimately talking about here. It's already well on its way, but it will make it worse. The more you concentrate power and feed data about people, the greater the potential damage. And of course, it doesn't need to be a full-on dictatorship to get problems with those. It's a spectrum of increasing problems you will get, the more you lean into it.
- perihelions 1y ago
  > "it's not unreasonable to think that by the end of the decade any site, including HN, might need to link usernames with their respective eIDs in case posts come from EU IP addresses." A rule of thumb that works too often is "how is mainland China doing things?"[0], and assume the West will follow behind shortly. [0] https://www.washingtonpost.com/world/2025/07/15/china-digital-id-internet-surveillance/ https://www.washingtonpost.com/world/2025/07/15/china-digita... ("Big Brother gets new powers in China with digital ID system") (tl;dr: Mandatory digital ID, with central government attesting and holding personal data in escrow. The "privacy-preserving", "least-bad option" a sizeable portion of even HN itself advocates for). > "This means that companies, like social media site Weibo or online shopping behemoth Alibaba, will no longer be able to see the personal information of their users with digital IDs — but Chinese authorities will be able to see the real identity behind online accounts across a range of sites."
  - Yeul 1y ago
    Oh well at least the Chinese aren't Christians.
    - viridian 1y ago
      Believe it or not, China has far and away the largest Christian population in the world. (I know, I know, culture, percent of the population, etc, this is just a fun fact that runs counter to intuition.)
  - GoblinSlayer 1y ago
    Is it worse than requiring a phone number?
- DocTomoe 1y ago
  > In this context, free alternative mobile platforms, such as Sailfish, cannot flourish. If you are a system that depends on people being constantly under the yoke of your jurisdictional powers, you do not want a strong, free, ecosystem. You want as little diversity as possible, ideally two so there is an illusion of choice.
- miki123211 1y ago
  Good luck convincing America to go along with this, especially in the current political climate. The EU doesn't have power beyond their jurisdiction, as much as they may pretend otherwise. Facebook and Google go along with what the EU wants because they make money there, and have physical properties located on the continent. YC does not.
  - White_Wolf 1y ago
    EU doesn't need to convice anyone. They can just make it mandatory and block anyone that doesn't comply.
- flyinghamster 1y ago
  > I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard, reinforcing the mobile duopoly. It's called bad faith, and it's an all too common problem with politicians and business types alike.
  - mvieira38 1y ago
    In this case it seems more like incompetence mixed with classic Euro bureacracy. The suits don't know better and consumers are braindead so won't even notice
  - qcnguy 1y ago
    Von der Leyen and the rest of the Commission aren't politicians nor business types. They don't run for election, they're all appointees. And most of them have never run a business either.
    - Muromec 1y ago
      Von der Leyen and the rest of executive branch of EU are appointed in a same way a lot of countries appoint their executive branch members — by a vote in legislative branch.
      - qcnguy 1y ago
        That's not how the EU works. The EU Parliament was given a vote on von der Leyen. It was a ballot with a single name on it: hers. By the time it go to the rubberstamping stage the decision was already made. The MEPs couldn't propose other candidates for the vote, and the Parliament can't propose changes to the law either, so it's not the legislative branch of the EU. The legislative branch of the EU would be... the EU Commission. Which is also its executive. The way von der Leyen was selected is a secret. Nobody knows how it happened. She didn't run in a democratic process of any kind, so she isn't a politician. If you ask EU fans they'll tell you the heads of state selected her. We have no evidence of this. That's the written process, but no records were produced of any such meeting, or a vote, or however it is that this decision was theoretically made. She could have been presented as a fait accompli by a single country, other countries could have been bribed, they could have been excluded entirely. We'd never know.
- andrepd 1y ago
  It's already close to impossible. Banking apps and government apps are close to mandatory to function in today's society, yet they plain do not work on Lineage, even with microg, or they work but need ridiculous workarounds. Never mind other "soft mandatory" things like messaging apps or whatever. I'm dedicated and I have a literal PhD in computer science, yet I'm fucking exhausted fighting this battle all the time. 0.1% chance someone has the capability to, and willingly goes through all this bother. Then tfa is just a nail in the coffin.
  - GoblinSlayer 1y ago
    Can't you have two phones: a Lineage phone for personal stuff and a Big Brother phone for banking and government and everything else uninstalled or disabled?
- GoblinSlayer 1y ago
  >any site, including HN, might need to link usernames with their respective eIDs I think, keybase already does it, and there are users here with signed proofs of identity.
- Idesmi 1y ago
  > I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard You'll be surprised, most of the time it's simple ignorance: the people making decisions don't know everything about everything. Hence democracy comes to rescue. But the way the European Commission takes decisions is anti-democratic (secret draft documents, undisclosed lobbying, overlooking the role of the Parliament…)
Zak 1y ago
When Microsoft proposed such a scheme in the early 2000s under the name "Palladium", even the mainstream press decried it as a nightmare scenario. Google did pretty much the same thing in 2014 with Safetynet and there was barely a whimper. How did we lose our way?
- userbinator 1y ago
  How did we lose our way? They figured out that much of the population is easily manipulated and controlled by exploiting their desire for "safety and security" --- in stark contrast to that classic Franklin quote (yes, I know the context isn't the same, but the words are otherwise a perfect fit for the situation.) It's only a minority of the population; and I'd suspect a smaller minority in the EU than the US; which is willing to argue against it. Next time you find yourself arguing for something or doing things a certain way, throw in an "it's better for security" or similar phrase with a plausible-sounding argument why, and see how easily it shuts down the opposition. In my experience, many won't even question it.
- wkat4242 1y ago
  Back with palladium the people that used computers were still mostly knowledgeable like us. These days everyone carries a phone and nobody really understands the impact. In fact many people in the EU are even against the opening of iOS because they feel comfortable in apple's walled garden. Many people consider privacy a lost battle (I often get the argument "why are you railing against this, you have no privacy anymore anyway"). And that's from intelligent people usually.
  - somenameforme 1y ago
    People often say things like this, but it's not supported by polling (or my own extensive anecdotal evidence) whatsoever. [1] For instance 81% believe the risks outweigh the benefits of corporate data collection, and 66% believe the same of government data collection. 64% would be uncomfortable with companies sharing their personal data with outside groups doing research that "might help them improve society", which is great because it shows people understand that such phrases aren't just about sitting around and singing kumbaya. [1] - https://www.pewresearch.org/internet/2019/11/15/americans-and-privacy-concerned-confused-and-feeling-lack-of-control-over-their-personal-information/ https://www.pewresearch.org/internet/2019/11/15/americans-an...
ars 1y ago
My phone is rooted and passes "Device security checks", even though it's not supposed to. I don't know how it works technically, but clearly there's a way to fake it.
- userbinator 1y ago
  AFAIK there are still cracks available, although it's been getting more difficult over time. This is another one of the reasons why I'm opposed to the current trend of "memory safety" that the megacorps are so enthusiastic about. When insecurity is freedom, and security means securing against the user's control, attacking insecurity will only close off paths to freedom.
  - TheDong 1y ago
    > This is another one of the reasons why I'm opposed to the current trend of "memory safety" So the argument is that those buffer overflows in iMessage used to target people (i.e. https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html?m=1 https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i... used to target a Saudi activist) are actually good because a hacker might jailbreak a phone with it? It's good if all my software on linux crashes with segfaults because it might let someone unlock a locked down linux device one day? I don't feel particularly free if my device is pwned with ransomware
    - userbinator 1y ago
      When the gun is pointed at you, you'd better hope it misfires.
- preisschild 1y ago
  There are two levels, one can be faked, one can not.
  - privacyking 1y ago
    The strong integrity can be faked if you have the keys from a trusted phone that has a security flaw that allows key extraction. I think google bans these from time to time.
Magnusmaster 1y ago
It's already happening for several apps such as banking apps, payment apps, government ID apps, etc.
motorest 1y ago
> There is some amusing irony in the EU relying on the US for furthering its own authoritarianism. I think you're trying too hard to post cynical remarks as if the were this major gotcha. Even though the bill is quite awful, Occam's razor is quick to point out this has all the hallmarks of an overzealous technocrat than authoritarianism. Try to think about it for a second: - the goal of the legislation is to ensure adult content is not provided or actively pushed to children, - adult content is pushed primarily by tech platforms, - the strategy is to allow access to adult content only to users who prove they are adults, - the strategy followed is to push an age verification system. - technocrats know age verification systems can be circumvented if tampered with. - technocrats proceed to add provisions that mitigate the risk of tampering age verification systems. The detail you're glancing over is US's hegemony over social media and tech platforms. The world is dominated by three platforms: Microsoft's, Apple's, Google's. Even Samsung is not European. How do you expect to push a technical solution for an authorization platform without leveraging the systems that people use? Also, the way the current US administration is pushing their blend of fascism onto the world is something I do not find funny. If anything, this would mean the American fascists are succeeding.
- AnthonyMouse 1y ago
  > How do you expect to push a technical solution for an authorization platform without leveraging the systems that people use? Imagine a world in which there are ten thousand phone platforms, some of them are developed by communities rather than business entities, and anyone can easily create a new one. Can your system function in that world? If so, then do it that way. If not, then assume it shouldn't work and stop trying to build it.
  - motorest 1y ago
    > Imagine a world in which there are ten thousand phone platforms, some of them are developed by communities rather than business entities, and anyone can easily create a new one. You'd be imagining a world that's very different from reality. Lawmakers have to operate in reality, though.
deleted 1y ago
[deleted]
Mudbugs 1y ago
>or for that matter, the UK. Hate to say it mate, UK is already one of the worst offenders. In their own "internet bubble," with curated Google searches that only present a very "Commonwealth countries bias" in search results. After I worked in the UK for a couple of years, I noticed there is a strong bias toward the same sites (Government and UK companies, especially biased toward "facts"). Second, you leave the UK. You will never get it. Try a VPN outside of the UK and search for the same stuff, you will notice it right away. The UK have used the "think about the children" excuse for different stuff they don't like (Remember the Porn pass Idea? Where you had to go down to your local Tesco to get a "wanker pass" from the cashier.) Same thing, now just for EU, and they use the "protect the children" excuse, but they have now started to aim at video game companies and others to "verify" age for the sake of "protecting the children". It is horrifying that they want to ID children in the excuse of their "safety". In a couple of years, they will likely offer free in-game currency to trick users into giving away their personal information.
pjc50 1y ago
Or, for that matter, the US. https://www.congress.gov/bill/118th-congress/house-bill/7891/text https://www.congress.gov/bill/118th-congress/house-bill/7891...
miki123211 1y ago
You can't have privacy-friendy age verification that is also compatible with tinkering. The problem is relay services that supply positive age verification results to any interested user for a fee. With a non-privacy-preserving solution, those aren't a problem, law enforcement can just track whose credentials those services are using and shut them down. I'm not a fan of the whole idea in general, but if we have to choose, I choose privacy over hackability.
- subscribed 1y ago
  But you can, and GrapheneOS shows exactly why. And there are developers who instead of choosing fake and flaved* Google "attestation", choose to conduct hardware attestation. *Google claims phones not updated for the last 8 years are secure merely because they have privileged Google services. Tell you what: many of them are rooted, with Google play services blind to it, and still claiming phones are "verified".
  - crowbahr 1y ago
    GrapheneOS has a privileged position in the Android ecosystem due to their connections to Google, so they can pass the STRONG version of attestation. If you're not passing STRONG attestation it's exceptionally difficult to protect against AI video injection attacks.
GuestFAUniverse 1y ago
It's no irony. Well payed "transatlantic" lobbyists across all political parties of the EU at work. They are self-serving and learnt to give a big F* about the citizens of the EU.
varispeed 1y ago
And people used to be ridiculed by claiming the EU is basically a Soviet Union with better looking face. But slowly slowly it will turn into mass terror and deaths. The control freaks in power are taking our freedoms away inch by inch.

nextos 1y ago

> leads straight into the dystopia that Stallman warned us about IMHO, the push for age verification is just a stepping stone towards requiring a mandatory ID for all social media posts made from EU. Given the current trends against freedom of speech, it's not unreasonable to think that by the end of the decade any site, including HN, might need to link usernames with their respective eIDs in case posts come from EU IP addresses. > officially sanctioned hardware and software Right now, if you want to run an alternative OS, it's already an uphill battle to use tons of member state services, as well as to do banking. Even if you have microG available, the situation is terrible. I imagine it's going to become harder. I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard, reinforcing the mobile duopoly. In this context, free alternative mobile platforms, such as Sailfish, cannot flourish.

tonyhart7 1y ago
"a mandatory ID for all social media posts made from EU. Given the current trends against freedom of speech" what?? how is this againt freedom of speech???, south korea implement this ages ago and there is nothing like that
- userbinator 1y ago
  https://en.wikipedia.org/wiki/Internet_censorship_in_South_Korea https://en.wikipedia.org/wiki/Internet_censorship_in_South_K... I wouldn't consider South Korea as having any meaningful freedom of speech; in fact they seem closer to China than the EU.
- numpad0 1y ago
  SK had this, and it appeared to have turned their entire WWW into 4chan with cult radicalisms. Their state of online speeches and its real world negative consequences are crazy. People on permanent records in real name never backs down because they more tangibly feel their mistakes as threats, and if you think about it, people who never backs down even if they are in wrong are effectively cultists. It's clear what these types of totalitarianism do and where this path ends. It's crazy EU don't get that.
  - tonyhart7 1y ago
    lol. its echo chamber on internet if you talk to people directly, no one said that
    - numpad0 1y ago
      Every cultures has echo chambers, I'm talking about which one is the worst and which parts of laws are likely fueling it
yorwba 1y ago
There's not a trend against freedom of speech so much as existing laws outlawing certain categories of speech being applied to the internet. If you lie in a commercial context, that's fraud; if you lie in court, that's perjury; if you tell your buddies to go do crimes together, that's conspiracy to commit; if you tell someone to give you money or else, that's blackmail... If you come from the perspective that there used to be freedom of speech and now there's all those pesky laws restricting what you can say, it looks like a slippery slope. If you realize that people have been required to check ID when selling material unsuitable for minors in physical stores since before the internet existed, it seems a bit more unlikely that ID requirements will expand to cover everything else.
- mytailorisrich 1y ago
  There is no "freedom of speech" in the US sense in the EU/UK. That's often a cause for misunderstanding between the two sides of the Pond. There are many things that you are not allowed to write or say by law in EU countries simply because the legislator has decided that they are wrong opinions, and it is generally accepted that the State can and should implement such controls. Note that lying is not a crime in general. Your examples are for very specific contexts.
  - af78 1y ago
    That's a common misconception. The European Convention on Human Rights guarantees freedom of expression https://en.wikipedia.org/wiki/European_Convention_on_Human_Rights#Article_10_%E2%80%93_expression https://en.wikipedia.org/wiki/European_Convention_on_Human_R... and is legally binding in all member states. Sure, there are exceptions but in the USA too freedom of speech is not absolute either. Moreover, in practice, there is more freedom of speech in most EU countries than in the USA https://ourworldindata.org/grapher/freedom-of-expression-index https://ourworldindata.org/grapher/freedom-of-expression-ind...: USA: 0.89 France: 0.96 Germany: 0.94 Czechia: 0.96 etc.
    - mytailorisrich 1y ago
      Including things like "media bias" and other dubious criteria in freedom of speech rankings is obviously skewed. Whatever the ECHR might say what I wrote in my previous comment is factual. In Europe "freedom of speech" comes with a long list of small print. In fact, this is so embedded that the article of the ECHR you quote provides for restrictions and even states that they are "necessary": "subject to certain restrictions that are "in accordance with law" and "necessary in a democratic society"." QED
swiftcoder 1y ago
> I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard It seems to be different branches of the EU? This has been a recurring problem in EU tech legislation - the EU government bodies are sufficiently autonomous that the right hand seldom knows what the left is doing...
- lynx97 1y ago
  "right hand" pretty nicely fits. The EU/EVP is much more conservative/right wing then many of its citizens are prepared to accept. Its a pretty nice propaganda-machinery that made this possible. Ask a random EU citizen if they are aware that conservatives are leading the EU since 30 years... You'll be surprised.
  - pantalaimon 1y ago
    The current push for more censorship is a left talking point though
    - andrepd 1y ago
      Yeah right... That's why the left wing parties in the EP voted against and the conservatives / neoright parties voted in favour of censorship. -.-
- SirHumphrey 1y ago
  To quote Yes, Minister: > Hacker: One of your officials pays farmers to produce surplus food, while on the same floor, the next office is paying them to destroy the surpluses. > Maurice: That is not true! > Hacker: No? > Maurice: He is not in the next office, not even on the same floor!
- qcnguy 1y ago
  They aren't autonomous at all though. All EU law comes from the Commission, which is a singular body run by a single appointed president, with everyone reporting directly to her. The Commission answers to nobody and the Parliament can't tell it what to do, just rubberstamp what it produces. This is the best case scenario for coherency in law making. It's designed to be as undemocratic as possible, so there's no need to make compromises or engage in pork barrel politics to get stuff over the line. The incoherency of the EU's approach is just a consequence of the incoherent thinking coming from the top. The EU always has extremely powerful but very low competency presidents, always for some reason those who were failures at national politics.
miohtama 1y ago
VPN ban is coming next.
- miohtama 1y ago
  VPN ban coming now in the UK https://news.ycombinator.com/item?id=44722216 https://news.ycombinator.com/item?id=44722216
kubb 1y ago
I would honestly love that. No more paid trolls on social media, the democratic process has a chance to adapt to technology, we can avoid the fate of the US.
- exe34 1y ago
  Only until the next Reichstag fire, I suspect, because by then there won't be any more democracy.
  - kubb 1y ago
    Can you phrase your thought as a causal chain so that I don’t have to guess what you mean?
    - BiteCode_dev 1y ago
      In the 1930s, the Dutch government conducted a census that included religion. The Netherlands, after all, had a comprehensive population registry system (Bevolkingsregister) established in the 19th century. This registry was centralized, continuously updated, and included religion, addresses, family connections, and occupations. After the German occupation in 1940, the Nazis accessed and exploited the Dutch population registry, including religious affiliation. About 75–80% of the ~140,000 Jews in the Netherlands were killed. This is the highest percentage in Western Europe. Compare that to France, which had a more fragmented administrative system, and less complete central records and 25% of Jews in France were deported and killed — a much lower percentage than the Netherlands. As usual, when reaching the Godwin point, the idea is not for you to take it at face value, but to extrapolate to your situation. The concentration of power and centralized people tracking are eventually always abused, and once your system becomes less free (which has historically eventually happened on a long enough timescale), you will pay the price for it. In our case, having a full history of all opinions, interactions, locations, and behavior linked to full identity of people is what we are ultimately talking about here. It's already well on its way, but it will make it worse. The more you concentrate power and feed data about people, the greater the potential damage. And of course, it doesn't need to be a full-on dictatorship to get problems with those. It's a spectrum of increasing problems you will get, the more you lean into it.
perihelions 1y ago
> "it's not unreasonable to think that by the end of the decade any site, including HN, might need to link usernames with their respective eIDs in case posts come from EU IP addresses." A rule of thumb that works too often is "how is mainland China doing things?"[0], and assume the West will follow behind shortly. [0] https://www.washingtonpost.com/world/2025/07/15/china-digital-id-internet-surveillance/ https://www.washingtonpost.com/world/2025/07/15/china-digita... ("Big Brother gets new powers in China with digital ID system") (tl;dr: Mandatory digital ID, with central government attesting and holding personal data in escrow. The "privacy-preserving", "least-bad option" a sizeable portion of even HN itself advocates for). > "This means that companies, like social media site Weibo or online shopping behemoth Alibaba, will no longer be able to see the personal information of their users with digital IDs — but Chinese authorities will be able to see the real identity behind online accounts across a range of sites."
- Yeul 1y ago
  Oh well at least the Chinese aren't Christians.
  - viridian 1y ago
    Believe it or not, China has far and away the largest Christian population in the world. (I know, I know, culture, percent of the population, etc, this is just a fun fact that runs counter to intuition.)
- GoblinSlayer 1y ago
  Is it worse than requiring a phone number?
DocTomoe 1y ago
> In this context, free alternative mobile platforms, such as Sailfish, cannot flourish. If you are a system that depends on people being constantly under the yoke of your jurisdictional powers, you do not want a strong, free, ecosystem. You want as little diversity as possible, ideally two so there is an illusion of choice.
miki123211 1y ago
Good luck convincing America to go along with this, especially in the current political climate. The EU doesn't have power beyond their jurisdiction, as much as they may pretend otherwise. Facebook and Google go along with what the EU wants because they make money there, and have physical properties located on the continent. YC does not.
- White_Wolf 1y ago
  EU doesn't need to convice anyone. They can just make it mandatory and block anyone that doesn't comply.
flyinghamster 1y ago
> I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard, reinforcing the mobile duopoly. It's called bad faith, and it's an all too common problem with politicians and business types alike.
- mvieira38 1y ago
  In this case it seems more like incompetence mixed with classic Euro bureacracy. The suits don't know better and consumers are braindead so won't even notice
- qcnguy 1y ago
  Von der Leyen and the rest of the Commission aren't politicians nor business types. They don't run for election, they're all appointees. And most of them have never run a business either.
  - Muromec 1y ago
    Von der Leyen and the rest of executive branch of EU are appointed in a same way a lot of countries appoint their executive branch members — by a vote in legislative branch.
    - qcnguy 1y ago
      That's not how the EU works. The EU Parliament was given a vote on von der Leyen. It was a ballot with a single name on it: hers. By the time it go to the rubberstamping stage the decision was already made. The MEPs couldn't propose other candidates for the vote, and the Parliament can't propose changes to the law either, so it's not the legislative branch of the EU. The legislative branch of the EU would be... the EU Commission. Which is also its executive. The way von der Leyen was selected is a secret. Nobody knows how it happened. She didn't run in a democratic process of any kind, so she isn't a politician. If you ask EU fans they'll tell you the heads of state selected her. We have no evidence of this. That's the written process, but no records were produced of any such meeting, or a vote, or however it is that this decision was theoretically made. She could have been presented as a fait accompli by a single country, other countries could have been bribed, they could have been excluded entirely. We'd never know.
andrepd 1y ago
It's already close to impossible. Banking apps and government apps are close to mandatory to function in today's society, yet they plain do not work on Lineage, even with microg, or they work but need ridiculous workarounds. Never mind other "soft mandatory" things like messaging apps or whatever. I'm dedicated and I have a literal PhD in computer science, yet I'm fucking exhausted fighting this battle all the time. 0.1% chance someone has the capability to, and willingly goes through all this bother. Then tfa is just a nail in the coffin.
- GoblinSlayer 1y ago
  Can't you have two phones: a Lineage phone for personal stuff and a Big Brother phone for banking and government and everything else uninstalled or disabled?
GoblinSlayer 1y ago
>any site, including HN, might need to link usernames with their respective eIDs I think, keybase already does it, and there are users here with signed proofs of identity.
Idesmi 1y ago
> I cannot understand why the European Commission wants to reduce our reliance on FAANG services, and at the same time they make Google Play a de facto standard You'll be surprised, most of the time it's simple ignorance: the people making decisions don't know everything about everything. Hence democracy comes to rescue. But the way the European Commission takes decisions is anti-democratic (secret draft documents, undisclosed lobbying, overlooking the role of the Parliament…)

Zak 1y ago

When Microsoft proposed such a scheme in the early 2000s under the name "Palladium", even the mainstream press decried it as a nightmare scenario. Google did pretty much the same thing in 2014 with Safetynet and there was barely a whimper. How did we lose our way?

userbinator 1y ago
How did we lose our way? They figured out that much of the population is easily manipulated and controlled by exploiting their desire for "safety and security" --- in stark contrast to that classic Franklin quote (yes, I know the context isn't the same, but the words are otherwise a perfect fit for the situation.) It's only a minority of the population; and I'd suspect a smaller minority in the EU than the US; which is willing to argue against it. Next time you find yourself arguing for something or doing things a certain way, throw in an "it's better for security" or similar phrase with a plausible-sounding argument why, and see how easily it shuts down the opposition. In my experience, many won't even question it.
wkat4242 1y ago
Back with palladium the people that used computers were still mostly knowledgeable like us. These days everyone carries a phone and nobody really understands the impact. In fact many people in the EU are even against the opening of iOS because they feel comfortable in apple's walled garden. Many people consider privacy a lost battle (I often get the argument "why are you railing against this, you have no privacy anymore anyway"). And that's from intelligent people usually.
- somenameforme 1y ago
  People often say things like this, but it's not supported by polling (or my own extensive anecdotal evidence) whatsoever. [1] For instance 81% believe the risks outweigh the benefits of corporate data collection, and 66% believe the same of government data collection. 64% would be uncomfortable with companies sharing their personal data with outside groups doing research that "might help them improve society", which is great because it shows people understand that such phrases aren't just about sitting around and singing kumbaya. [1] - https://www.pewresearch.org/internet/2019/11/15/americans-and-privacy-concerned-confused-and-feeling-lack-of-control-over-their-personal-information/ https://www.pewresearch.org/internet/2019/11/15/americans-an...

ars 1y ago

My phone is rooted and passes "Device security checks", even though it's not supposed to. I don't know how it works technically, but clearly there's a way to fake it.

userbinator 1y ago
AFAIK there are still cracks available, although it's been getting more difficult over time. This is another one of the reasons why I'm opposed to the current trend of "memory safety" that the megacorps are so enthusiastic about. When insecurity is freedom, and security means securing against the user's control, attacking insecurity will only close off paths to freedom.
- TheDong 1y ago
  > This is another one of the reasons why I'm opposed to the current trend of "memory safety" So the argument is that those buffer overflows in iMessage used to target people (i.e. https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html?m=1 https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i... used to target a Saudi activist) are actually good because a hacker might jailbreak a phone with it? It's good if all my software on linux crashes with segfaults because it might let someone unlock a locked down linux device one day? I don't feel particularly free if my device is pwned with ransomware
  - userbinator 1y ago
    When the gun is pointed at you, you'd better hope it misfires.
preisschild 1y ago
There are two levels, one can be faked, one can not.
- privacyking 1y ago
  The strong integrity can be faked if you have the keys from a trusted phone that has a security flaw that allows key extraction. I think google bans these from time to time.

Magnusmaster 1y ago

It's already happening for several apps such as banking apps, payment apps, government ID apps, etc.

motorest 1y ago

> There is some amusing irony in the EU relying on the US for furthering its own authoritarianism. I think you're trying too hard to post cynical remarks as if the were this major gotcha. Even though the bill is quite awful, Occam's razor is quick to point out this has all the hallmarks of an overzealous technocrat than authoritarianism. Try to think about it for a second: - the goal of the legislation is to ensure adult content is not provided or actively pushed to children, - adult content is pushed primarily by tech platforms, - the strategy is to allow access to adult content only to users who prove they are adults, - the strategy followed is to push an age verification system. - technocrats know age verification systems can be circumvented if tampered with. - technocrats proceed to add provisions that mitigate the risk of tampering age verification systems. The detail you're glancing over is US's hegemony over social media and tech platforms. The world is dominated by three platforms: Microsoft's, Apple's, Google's. Even Samsung is not European. How do you expect to push a technical solution for an authorization platform without leveraging the systems that people use? Also, the way the current US administration is pushing their blend of fascism onto the world is something I do not find funny. If anything, this would mean the American fascists are succeeding.

AnthonyMouse 1y ago
> How do you expect to push a technical solution for an authorization platform without leveraging the systems that people use? Imagine a world in which there are ten thousand phone platforms, some of them are developed by communities rather than business entities, and anyone can easily create a new one. Can your system function in that world? If so, then do it that way. If not, then assume it shouldn't work and stop trying to build it.
- motorest 1y ago
  > Imagine a world in which there are ten thousand phone platforms, some of them are developed by communities rather than business entities, and anyone can easily create a new one. You'd be imagining a world that's very different from reality. Lawmakers have to operate in reality, though.

deleted 1y ago

[deleted]

Mudbugs 1y ago

>or for that matter, the UK. Hate to say it mate, UK is already one of the worst offenders. In their own "internet bubble," with curated Google searches that only present a very "Commonwealth countries bias" in search results. After I worked in the UK for a couple of years, I noticed there is a strong bias toward the same sites (Government and UK companies, especially biased toward "facts"). Second, you leave the UK. You will never get it. Try a VPN outside of the UK and search for the same stuff, you will notice it right away. The UK have used the "think about the children" excuse for different stuff they don't like (Remember the Porn pass Idea? Where you had to go down to your local Tesco to get a "wanker pass" from the cashier.) Same thing, now just for EU, and they use the "protect the children" excuse, but they have now started to aim at video game companies and others to "verify" age for the sake of "protecting the children". It is horrifying that they want to ID children in the excuse of their "safety". In a couple of years, they will likely offer free in-game currency to trick users into giving away their personal information.

pjc50 1y ago

Or, for that matter, the US. https://www.congress.gov/bill/118th-congress/house-bill/7891/text https://www.congress.gov/bill/118th-congress/house-bill/7891...

miki123211 1y ago

You can't have privacy-friendy age verification that is also compatible with tinkering. The problem is relay services that supply positive age verification results to any interested user for a fee. With a non-privacy-preserving solution, those aren't a problem, law enforcement can just track whose credentials those services are using and shut them down. I'm not a fan of the whole idea in general, but if we have to choose, I choose privacy over hackability.

subscribed 1y ago
But you can, and GrapheneOS shows exactly why. And there are developers who instead of choosing fake and flaved* Google "attestation", choose to conduct hardware attestation. *Google claims phones not updated for the last 8 years are secure merely because they have privileged Google services. Tell you what: many of them are rooted, with Google play services blind to it, and still claiming phones are "verified".
- crowbahr 1y ago
  GrapheneOS has a privileged position in the Android ecosystem due to their connections to Google, so they can pass the STRONG version of attestation. If you're not passing STRONG attestation it's exceptionally difficult to protect against AI video injection attacks.

GuestFAUniverse 1y ago

It's no irony. Well payed "transatlantic" lobbyists across all political parties of the EU at work. They are self-serving and learnt to give a big F* about the citizens of the EU.

varispeed 1y ago

And people used to be ridiculed by claiming the EU is basically a Soviet Union with better looking face. But slowly slowly it will turn into mass terror and deaths. The control freaks in power are taking our freedoms away inch by inch.