REMEMBER WHAT ANDREAS ANTONOPOULOS 🐜
ONCE SAID ABOUT GOVERNMENT DOING IT?
INCOMPETENCE ON STEROIDS! AND MILLIONS OF TAX REVENUE BURNED🔥!
OH, WAIT, THE #DIGITALEURO WALLET WILL BE SUPER CONVENIENT! 💩
👇🏻👇🏻
“Hacking the #EU #AgeVerification app in under 2 minutes.
During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.
1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.
So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.
After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.
Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.
Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.”
via https://x.com/paul_reviews/status/2044723123287666921
👇🏻👇🏻
“‼️🇪🇺 The EU's new Age Verification app was hacked with little to no effort.
When you set it up, the app asks you to create a PIN. But that PIN isn't actually tied to the identity data it's supposed to protect. An attacker can delete a couple of entries from a file on the phone, restart the app, pick a new PIN, and the app happily hands over the original user's verified identity credentials as if nothing happened.
It gets worse. The app's "too many attempts" lockout is just a counter in a text file. Reset it to 0 and keep guessing. The biometric check (face/fingerprint) is a simple on/off switch in the same file. Flip it to off and the app skips it entirely.”
via https://x.com/intcyberdigest/status/2044762941019295772
#bitcoin fixes this 🐇🧡
#EUafuera 🔥
#REJECTCBDC
#NoDgitalEuro
#nostr
#ageverification
#surveillance
#control
cc: Susie (nprofile…yznw) Efrat Fenigson (nprofile…psly) walker (nprofile…4fqx) preston (nprofile…nsfz) jack (nprofile…y5ck)
BankSith
npub1xu…c97xc
2026-04-16 17:51:42 UTC
Author Public Key
npub1xuc7z6wskwqk7jj2ntyyce42gg757n4q7794dgwljpsfhpd7pzzshc97xcSeen on
wss://nostr.momPublished at
2026-04-16 17:51:42 UTCEvent JSON
{
"id": "27e3d975bba8ae0ec49ca81d3d1a41881fe96c6ea9b574374ea376e2b6f92385",
"pubkey": "3731e169d0b3816f4a4a9ac84c66aa423d4f4ea0f78b56a1df90609b85be0885",
"created_at": 1776361902,
"kind": 1,
"tags": [
[
"p",
"85080d3bad70ccdcd7f74c29a44f55bb85cbcd3dd0cbb957da1d215bdb931204",
"wss://relay.damus.io/",
"mention"
],
[
"p",
"6a359852238dc902aed19fbbf6a055f9abf21c1ca8915d1c4e27f50df2f290d9",
"wss://nostr.wine",
"mention"
],
[
"p",
"bb90e7f0531d4abaa39ff85091577434fb6fd3aff9cfb8da275199e241eb4eff",
"wss://relay.damus.io",
"mention"
],
[
"p",
"c48e29f04b482cc01ca1f9ef8c86ef8318c059e0e9353235162f080f26e14c11",
"wss://offchain.pub",
"mention"
],
[
"p",
"82341f882b6eabcd2ba7f1ef90aad961cf074af15b9ef44a09f9d2a8fbfbe6a2",
"wss://relay.damus.io",
"mention"
],
[
"t",
"DIGITALEURO"
],
[
"t",
"EU"
],
[
"t",
"AgeVerification"
],
[
"t",
"bitcoin"
],
[
"t",
"EUafuera"
],
[
"t",
"REJECTCBDC"
],
[
"t",
"NoDgitalEuro"
],
[
"t",
"nostr"
],
[
"t",
"ageverification"
],
[
"t",
"surveillance"
],
[
"t",
"control"
],
[
"imeta",
"url https://blossom.primal.net/10fccaa8a88c3b43a0d2339258124d991367ee3fbaa612dcdd56b125a9478c4f.mp4",
"m video/mp4",
"dim 480.0x496.0"
],
[
"imeta",
"url https://blossom.primal.net/6c5fefca2ef735edd3a11445000ad2714b6144bc22fca67d3ecbbdd43e1f791c.mov",
"m video/quicktime",
"dim 478.0x762.0"
]
],
"content": "REMEMBER WHAT ANDREAS ANTONOPOULOS 🐜 \nONCE SAID ABOUT GOVERNMENT DOING IT? \n\nINCOMPETENCE ON STEROIDS! AND MILLIONS OF TAX REVENUE BURNED🔥! \n\nOH, WAIT, THE #DIGITALEURO WALLET WILL BE SUPER CONVENIENT! 💩 \n\n👇🏻👇🏻\n\n“Hacking the #EU #AgeVerification app in under 2 minutes.\n\nDuring setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.\n\n1. It shouldn't be encrypted at all - that's a really poor design.\n2. It's not cryptographically tied to the vault which contains the identity data.\n\nSo, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.\n\nAfter choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.\n\nOther issues:\n1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.\n2. \"UseBiometricAuth\" is a boolean, also in the same file. Set it to false and it just skips that step.\n\nSeriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.”\nvia https://x.com/paul_reviews/status/2044723123287666921\n\n👇🏻👇🏻\n\n“‼️🇪🇺 The EU's new Age Verification app was hacked with little to no effort.\n\nWhen you set it up, the app asks you to create a PIN. But that PIN isn't actually tied to the identity data it's supposed to protect. An attacker can delete a couple of entries from a file on the phone, restart the app, pick a new PIN, and the app happily hands over the original user's verified identity credentials as if nothing happened.\n\nIt gets worse. The app's \"too many attempts\" lockout is just a counter in a text file. Reset it to 0 and keep guessing. The biometric check (face/fingerprint) is a simple on/off switch in the same file. Flip it to off and the app skips it entirely.”\nvia https://x.com/intcyberdigest/status/2044762941019295772\n\n#bitcoin fixes this 🐇🧡\n#EUafuera 🔥\n#REJECTCBDC\n#NoDgitalEuro\n#nostr\n#ageverification\n#surveillance\n#control \n\ncc: nostr:nprofile1qqsthy887pf36j465w0ls5y32a6rf7m06whlnnacmgn4rx0zg845alcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq32amnwvaz7tm9v3jkutnwdaehgu3wd3skueqmcyznw nostr:nprofile1qqsx5dvc2g3cmjgz4mgelwlk5p2ln2ljrsw23y2ar38z0agd7tefpkgpzpmhxue69uhkummnw3ezuamfdejsz9thwden5te0v4jx2m3wdehhxarj9ekxzmnyxdpsly nostr:nprofile1qqsvfr3f7p95stxqrjslnmuvsmhcxxxqt8swjdfjx5tz7zq0yms5cygpzfmhxue69uhk7enxvd5xz6tw9ec82cspz3mhxue69uhkummnw3ezummcw3ezuer9wcf74fqx nostr:nprofile1qqsg2zqd8wkhpnxu6lm5c2dyfa2mhpwte57apjae2ldp6g2mmwf3ypqpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9thwden5te0dehhxarj9ehhsarj9ejx2a3089nsfz nostr:nprofile1qqsgydql3q4ka27d9wnlrmus4tvkrnc8ftc4h8h5fgyln54gl0a7dgspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds8py5ck \nhttps://blossom.primal.net/10fccaa8a88c3b43a0d2339258124d991367ee3fbaa612dcdd56b125a9478c4f.mp4\nhttps://blossom.primal.net/6c5fefca2ef735edd3a11445000ad2714b6144bc22fca67d3ecbbdd43e1f791c.mov",
"sig": "e7c36925e646378be8b90b1a3914eb245fa49a4fbb80dc1b3355921f34e534282775de2bda7775f15bc6751d2a82b3125c2c9add64a03834f548f7ff79992d9d"
}