Updated:09:24 AM CEST Apr,21

NEWS / RSS
CHEATS

REVIEWS

ARTICLES

HARDWARE

DEMOS

FORUMS

LINKS (new)

66 lottery login

91 club

okwin

bdg game

55 club

CONTACT

Please e-mail us if you have news.

EU Age Verification App Leaves Biometric Images Unencrypted on Devices - tech

(hx) 12:36 AM CEST - Apr,16 2026

Security consultant Paul Moore has exposed a major privacy flaw in the EU's open-source age verification app, which Ursula von der Leyen claimed meets the world's highest privacy standards. The app saves raw biometric data—including lossless PNG images from NFC passport scans and user selfies—directly to the device filesystem without encryption, deleting them only on successful processing. Failures, crashes, retries, or user abandonment leave these sensitive files lingering in cache or external storage, protected solely by basic Android keys.

Only the final "is_over_18" result receives AES-GCM encryption, prompting serious questions about GDPR compliance for special category biometric data retained without clear lawful basis.

.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..."

I did. It didn't take long to find what looks like a serious #privacy issue.

The app goes to great… pic.twitter.com/z8SYc3YBKJ
— Paul Moore - Security Consultant ? (@Paul_Reviews) April 15, 2026

last 10 comments:

Sabot	(12:42 PM CEST - Apr,16 2026 )
This makes you wonder who is training and supervising those next Gen IT professionals. This isn’t games they are playing but real peoples lives and once again…. Android :roll: costs again factor into this.

All comments

Add your comment (free registration required)