Brussels launched an age verification app, and hackers broke it in 2 minutes

In Brussels, the European Union (EU) unveiled a mobile app for online age verification, but immediately after its release, security experts found major security and privacy issues.

European Commission President Ursula von der Leyen stated that the tool was "technically ready" and explained it would be used for each country's social media restriction policies to protect children.

However, security researchers who reviewed the published source code pointed out the following problems:

• The app stores sensitive data on the phone without properly protecting it
• Biometric authentication can be bypassed, allowing access without a PIN or Touch ID
• Even a device that has already completed adult verification could be reused by someone else

Security consultant Paul Moore claimed he hacked the app in 2 minutes, and French white-hat hacker Baptiste Robert also confirmed several issues.

In response, the European Commission explained that the version in question was a demo version and that the issues had been fixed, but Moore and Blazy countered that what they tested was the latest version posted online.

This controversy is leading to criticism that the EU's push for age verification, digital identity, and child protection policies has yet to actually meet security and privacy standards.