News for hackers. Stuff that matters.
Re:German implementation of eIDAS will require an Apple/Goog... by notpushkin on Sunday April 05, 2026 @05:38AM (#47647689)
> You could run a modified client that lets you assume any identity you choose

Provided you know the secret key to a government-issued certificate. Making it impossible to copy said certificate is not really a requirement for identity verification.

Re:German implementation of eIDAS will require an Apple/Goog... by subscribed on Sunday April 05, 2026 @11:33AM (#47650462)
Some countries fixed it already, see Estonian ir Polish IDs with digital layer (performing signing, authentication, etc), and the devices only acting as untrusted interfaces to these.
Re:German implementation of eIDAS will require an Apple/Goog... by notpushkin on Monday April 06, 2026 @06:31AM (#47659101)
It’s still impossible to extract an Estonian certificate from the smart card (or Mobiil-ID/Smart-ID), no?
Re:German implementation of eIDAS will require an Apple/Goog... by subscribed on Monday April 06, 2026 @07:19AM (#47659437)
I believe do, I didn't see a successful attack yet.