Launching an EU Citizens' Initiative (ECI) for Device Neutrality & Open Attestation ("My Device, My OS")

19 hours ago by gerardPolloRebozado to c/android

Hi everyone,

Between Google Play Integrity API lockdowns, Apple App Attest, and upcoming eID/age-verification mandates, alternative and privacy-focused operating systems (like GrapheneOS, LineageOS, and Linux on mobile) are being systematically locked out of banking, public portals, and everyday apps.

Rather than watching vendor lock-in get worse, I am organizing a European Citizens' Initiative (ECI) working title: "My Device, My OS" to push binding EU legislation for Device Neutrality and Open Attestation.

What we aim to achieve:

  • Mandate Open Attestation Standards: Require services operating in the EU to support open, vendor-neutral hardware attestation rather than relying exclusively on proprietary gatekeeper APIs (Google/Apple).
  • Ban Device/OS Discrimination: Prevent public services, digital ID wallets, and essential commercial apps from arbitrarily blocking users solely for running independent or de-Googled operating systems.
  • Protect Hardware Sovereignty: Enshrine the legal right of consumers to install and run the operating system of their choice without losing access to the digital single market.

Join the Matrix room to discuss, collaborate on the draft, and coordinate next steps:
šŸ‘‰ #my-device-my-os:pollorebozado.com

Feedback, technical insights, and EU organizers are all welcome!

onlinepersona 12 points 18 hours ago

GrapheneOS devs are going to blow a gasket - they hate attestation of any kind.

But I do remember a few european companies working on a attestation. I think it was spearheaded by the devs of eOS and Jolla. They might want to talk to you about it.

Edit: I was not far off. It's by Volla and called UniAttest aka Unified Attestation

path: 0 25375241, hotness: undefined, score: 12, children: 6
Zak 14 points 17 hours ago

GrapheneOS devs are going to blow a gasket - they hate attestation of any kind.

No they don't. GrahpeneOS supports attestation and runs an integrity monitoring service so users can detect tampering with their GrapheneOS devices.

I hate third-party apps having the ability to use remote attestation, but I am not the GrapheneOS devs.

path: 0 25375241 25375962, hotness: undefined, score: 14, children: 3
onlinepersona 3 points 12 hours ago path: 0 25375241 25375962 25381026, hotness: undefined, score: 3, children: 2
Zak 4 points 11 hours ago

GrapheneOS is opposed to using attestation for lock-in, including Unified Attestation. They are not opposed to all uses of attestation, which they write in the linked thread:

Hardware-based attestation has valid use cases including the Auditor app on GrapheneOS for protecting users.

path: 0 25375241 25375962 25381026 25381191, hotness: undefined, score: 4, children: 1
onlinepersona 2 points 9 hours ago

Yes, of course. "My attestation is better and who will be able to use it? GrapheneOS of course! This isn't lock-in BTW šŸ˜™"

path: 0 25375241 25375962 25381026 25381191 25382984, hotness: undefined, score: 2, children: 0
gerardPolloRebozado 3 points 16 hours ago

One of their team members of eOS has joined the comitee

path: 0 25375241 25376334, hotness: undefined, score: 3, children: 0
LodeMike 1 point 8 hours ago

...because it's not an open standard but they would probably still hate what this proposal wants.

path: 0 25375241 25383987, hotness: undefined, score: 1, children: 0
mEEGal 1 point 8 hours ago

great news !

keep us posted, I'm there if you want us to sign anything !

path: 0 25383720, hotness: undefined, score: 1, children: 0
android
android

@lemmy.world

login for more options
34588
2111
2694

DROID DOES

Welcome to the Android community on Lemmy. Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


go to feed...