What they're not telling you: The EU’s new age-verification app uses zero-knowledge proofs to let users cryptographically prove they meet an age requirement without revealing their identity or personal data. It works via a trusted credential issued once and stored locally, then generates privacy-preserving proofs on demand so services only receive a yes/no result rather than sensitive informat.

Marcus Webb
The Take
Marcus Webb · Surveillance & Tech Privacy

This is security theater dressed in mathematical formalism, and the EU knows it. Yes, zero-knowledge proofs are cryptographically sound. No, that doesn't matter here. The actual attack surface sits upstream: you still need to *prove* your age to the system initially. Someone—a government database, a telecom provider, an identity verification vendor—holds your real data, your biometrics, your document scans. That's where the breach happens. That's where the correlation attack lives. The EU is announcing the cryptographic layer while remaining conspicuously silent about the onboarding infrastructure. Who verifies your identity before you generate that ZK proof? What happens to that verification record? Is it logged, timestamped, tied to your IP? Stored in some GDPR-compliant silo that'll be breached in eighteen months? The real tell: this solves a problem that doesn't exist. Age verification already works fine without this apparatus. What this actually enables is frictionless age-gating at scale—collecting behavioral data about who accesses restricted content and when. The zero-knowledge proof is the lock on the front door while they're building a pipeline in the basement. Elegant cryptography, terrible policy.

What the Documents Show

This story originates from r/privacy. The details have received minimal coverage from major outlets — which should tell you something. tech-&-privacy news is at the center of what's emerging.

🔎 Mainstream angle: The corporate press either ignored this story entirely or buried it in a 3-sentence brief. The framing, when it appeared at all, focused on process rather than impact.

Primary Sources

What are they not saying? Who benefits from this story staying buried? Follow the regulatory filings, the court dockets, and the FOIA releases. The truth is in the paperwork — it always is.

Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.