EU Age Verification App Hacked in Minutes, Raising Security Concerns
The European Commission's new age verification app, designed to confirm users' ages without accessing personal data, was compromised by security researchers in under two minutes. This incident occurred shortly after Commission President Ursula von der Leyen declared the app 'technically ready.' Despite this declaration, the app's GitHub repository had a warning indicating it was not suitable for real-world use. Security consultant Paul Moore demonstrated how the app's security could be bypassed by manipulating its configuration files, allowing unauthorized access to verified credentials. The app, developed by Scytales and Deutsche Telekom, uses zero-knowledge proof technology. However, the Commission's digital spokesperson later clarified that the app was still in a demo phase, despite earlier claims of it being a final version.