Status of MitID app

hotdime5913

I ended up spending a little day making a ESP32-CAM project that presses the "MitID code viewer" button with a 9G servo, takes a image, uploads it to server, processes it and returns it to a secured progressive web app.

ESP32-CAM Project
Web App

If anyone are interested in the project files/source code, let me know.

It requires:
3D printer
ESP32-CAM
SG90 servo
1A USB adapter
A cheap VPS
A domain
Some time to setup

Roede

For the danes: www.digitalstemme.dk
Viva la Revolution!

dabvi6e1

@Krabbe Did you get anywhere with your attempts to "clone" an older MitID installation?

I have a working MitId on my Pixel 7 Pro (activated 2023), and I recently upgraded to a Pixel 10. I wanted to try a full backup/restore of the app's data, but I'm not sure what tool to use since GOS isn't rooted (so no Titanium Backup) and Seedvault just restores APKs.

Roede

https://www.dr.dk/nyheder/viden/teknologi/danmarks-digitale-apps-bliver-vogtet-af-amerikanske-tech-giganter

Article in national media about governments apps being constrained to big tech. Experts call for open source alternative and mentions Graphene OS.

TrustExecutor

Roede
Amazing. The Motorola partnership will hopefully strengthen GrapheneOS's recognition even more and.

hotdime5913
Kudos to you for finding ways around this!

opteron

Article from today during the elections: Politicians from seven parties: Your MitID should work without Apple and Google

(...) according to the Danish Agency for Digitisation, MitID is only available for Apple and Google’s operating systems because the two American tech giants “offer the necessary technical security mechanisms.” And because these are the most widely used platforms on the Danes' mobile phones.

TrustExecutor

opteron
It's probably a good idea to forward the well written email (in danish) that was posted further up in this thread directly to the journalists on this newspaper. Inform them about hardware attestation and the security theater of Play Integrity API. I unfortunately don't speak the language.

opteron

TrustExecutor Way ahead of you. I gave him a link to this thread and https://grapheneos.org/articles/attestation-compatibility-guide as welll

TrustExecutor

opteron Awesome! Thanks.

fedthaar

This is properly answered 1 billion times already :|

But will Mitid not work even if u relock the bootloader and dont root the phone?

Roede

fedthaar
Nope will not work. Every trick in the book known to man has been tried. The new stuff available to developers in Google Play Services (as far as I can read various places), are actively trying to prevent apps from running on non-google android. It seems to be targeting non-Google rather than adressing security issues. Which is a logical move if you're trying to own the world.

Viva la Revolution!

DistressedMustard6277

hotdime5913 I'm very interested in this project.

FishFriedi

Has anyone experience with any of the physical MitID hardware like the MitID chip? I'm considering just getting that and living with the fact that I won't have MitID on my phone, when i install GrapheneOS.

Roede

I'm using the code display and it works perfectly. Its small enough to bring with you if you need to, but nothing I have to do with mitid, is urgent enough that it can't wait until im back in the house end if day again. I do bring it with me for travel though.

lbschenkel

A slightly off-topic FYI: I've tested AltID, the Danish implementation of the EU Digital Wallet Initiative, and I'm positively surprised that it worked in GrapheneOS and it is not attempting to do any Play Integrity verification.

Note that AltID does not replace MitID. MitID will still be used for authentication. In fact AltID requires MitID (code display works) to set it up.

Roede

lbschenkel
👍 Good info - thanks!

« Previous Page