• 0 Posts
  • 38 Comments
Joined 2 years ago
cake
Cake day: March 6th, 2025

help-circle





  • Oh I see! Yeah the p12 cert solution would obviously be vulnerable to the “grandma attack”

    But it seems weird, because all of us in the EU should have to implement the eIDAS directive right, and our implementation of an eID here in Germany at least is an NFC interface on our national identity cards. So any phone with NFC can be the reader.

    If I wanna do my taxes, I touch my ID to my phone, enter my PIN and get logged in.

    Granted…that’s still a pretty fucked up “auth flow” for when I wanna watch porn 😅


  • For the first part of the question: I have to think/find a specific protocol to verify my intuition…

    For the second part of the question: no that is not possible. Cryptographic material is stored in a Smartcard/secure platform module which (in simple terms) means the key material can’t be extracted. So you always have to be physically in possession of the ID card/device with digital wallet in order to use it. Further you have to know a PIN or be able to present some biometric features to

    So yeah a smart kid can nick their grannies ID, find out her PIN or socially engineer her into providing biometric features. But it would only be valid for that one attestation.









  • Nah not really…most of the time I’m at least doing a light metadata check, like who’s the maintainer & main contributors, any trusted folks have starred the repo, how active is development and release frequency, search issues with “vulnerability”/“cve” see how contributors communicate on those, previous cve track record.

    With real code audits… I could only ever be using a handful of programs, let alone the thought of me fully auditing the whole linux kernel before I trust it 😄

    Focusing on “mission critical” apps feels pretty useless imho, because it doesn’t really matter which of the thousands of programs on your system executes malicious code, no? Like sure, the app you use for handling super sensitive data might be secure and audited…then you get fucked by some obscure compression library silently loaded by a bunch of your programs.