EU Age Verification App Hacked in Minutes, Telegram Founder Warns
Pavel Durov, the founder of the popular messaging app Telegram, has asserted that the European Union's newly developed age verification app, intended to safeguard children online, can be compromised in just two minutes. Durov joined cybersecurity experts and privacy advocates in raising alarms about the app's security, labeling it a surveillance tool.
Security Flaws and Privacy Concerns
In a post on X, Durov criticized the app's design, stating, The EU age verification app was hackable by design – it trusted the device (that's instant game over). He further suggested that EU officials might exploit this vulnerability to undermine personal freedoms, remarking, But don't rush to laugh at EU bureaucrats. All they needed was another excuse to erode our freedoms. This 'surveiling hack' just handed it to them.
The European Commission unveiled the app last week, promoting it as a measure to hold online platforms accountable and prioritize children's safety over commercial interests. The app is slated for rollout across Europe, requiring users to input a government-issued ID, such as a passport, to access online services.
Contradictory Claims from EU Officials
Ahead of the app's release, European Commission President Ursula von der Leyen emphasized its privacy features, claiming it adheres to the highest global standards and does not disclose personal data to third parties. Put simply, it is completely anonymous, she said. Users cannot be tracked. She also highlighted that the app is open source, allowing public scrutiny of its code.
However, security researchers quickly tested the app, uncovering significant issues. In a widely circulated X post, security consultant Paul Moore identified a serious privacy flaw, noting that source images from passports, IDs, or selfies used for biometric data were stored unencrypted and could not be fully deleted. Leaving the original image on disk is crazy and unnecessary, he wrote. I don't think anyone disputes the need to protect children from online harm, but this really isn't the solution.
Uncertain Launch and Ongoing Scrutiny
A spokesperson for the European Commission, Paula Pinho, confirmed on Friday that the app is technically ready for launch but acknowledged it remains a demo version, stating, Yes, it is ready. Maybe we can add, 'and it can always be improved'. No official launch date has been set, and further details are pending as The Independent seeks additional information.
