@elena @aral I couldn't resist, so I've wasted my precious time looking at "W Identity" today.

Things are not right.

It is basically a repurposed https://github.com/PeterWaher/IoTGateway

Just look here: https://root.widentity.eu/Settings/Master.md

It has a socks4(?) open on port 1080, some xmpp stuff on 5222 and 5269, another (seemingly broken) version of the website on 8088.

The following pages are accessible without auth:

(found by a simple "egrep -LR 'Privilege:|Login:' * |grep md | grep Root" through the source)

/Settings/PersonalData/LocalDatabase.md
/Settings/PersonalData/LocalSensorsAndDevices.md
/Settings/PersonalData/EventLogs.md
/Settings/PersonalData/NetworkIdentity.md
/Settings/PersonalData/WebPages.md
/Settings/PersonalData/Backups.md
/Settings/Master.md
/Copyright.md
/Starting.md [http response 307]
/Login.md
/Entities.md
/Templates/Repeat.md
/AdminDropdownComponent.md
/Script.md
/AdminDropdown.md
/AlertPopup.md
/Master.md
/PromptPopup.md
/ConfirmPopup.md
/Markdown.md
/Emojis.md
/Smileys.md
/Index.md
/MarkdownEditor.md
/ScriptColors.md
/Master.md

Others pages also exist (no 404), but are only available after login.

Which brings me to the biggest problem of all.

This is an ADMIN interface.

Nobody should ever put an admin interface to an identity management platform on the internet.

#WSocial #Widentity

GitHub - PeterWaher/IoTGateway: New project

New project. Contribute to PeterWaher/IoTGateway development by creating an account on GitHub.

GitHub
Avete seguito i primi commenti su #W, presentato come il nuovo social network europeo basato su at protocol che è lo stesso usato da #Bluesky? @[email protected]

Sembra una versione più #gdpr compliant (ma devo approfondire) dei social network commerciali tradizionali USA. Ma è forse una semplificazione eccessiva. Si tratta in effetti di una iniziativa a scopo commerciale con base nello spazio economico europeo e vincoli sugli investitori che devono essere europei (elemento identitario della strategia di marketing adottata per il lancio che potrebbe essere fuorviante, quindi occhio).

La verifica dell'identità sembra essere centralizzata e demandata ad una entità che fa capo alla società svedese che sviluppa il social network. Quindi questa società potrebbe teoricamente revocare i certificati di identità.

Il social network (le istanze) sono teoricamente federate o federabili ma la certificazione dell'identità è centralizzata.

L'entità centrale che garantirebbe l'identità degli utenti svolge la funzione delle autorità di certificazione in modo simile a quanto avviene nella firma digitale o nello SPID. Non è escluso quindi che in futuro possa essere dato accesso all'ecosistema anche ad altre autorità di identificazione (anzi sarebbe auspicabile).

Questo sistema dovrebbe riuscire a risolvere il problema dei bot e degli account fasulli.
Quindi in alcuni casi potrebbe essere utile (istituzioni, politici, in genere soggetti che richiedano certezza sull'identità).

Certo che se per verificare l'identità bisogna installare l'app dell'autorità di certificazione dal Play Store di G, non partiamo proprio benissimo.

Comunque questo pregiudizio strisciante che qualsiasi cosa che sia europeo sia buono a prescindere mi preoccupa parecchio perché obnubila le menti e riduce l'esercizio del senso critico.

Se ci sono errori scrivete pure. Sto cercando di capire e quello che ho scritto è il frutto di una mia prima ricerca.

#atprotocol #widentity

On Bluesky, @thisismissem does some digging and discovers that W Social and W Identity are basically the same people. So much for the line that "W Social doesn't know who you are because W Identity handles all the identity verification".

https://bsky.app/profile/thisismissem.social/post/3mond5z5mmc2r

#WSocial #WIdentity

Emelia (@thisismissem.social)

So I've been trying to understand the legal structure that W Social has to better understand the separation between W Identity and W Social, and it's quickly looking like it's all for show.

Bluesky Social

@_elena @EUCommission

W Social: "You need to verify your identity. Please download our #WIdentity app from Apple's App Store or Google's Play Store"

Go to googles or apples tracker store and download the app.

Does the W stand for Wankers?

😮 @[email protected] : #WSocial: "We want to promote European digital sovereignty. We're made in Europe, for the world!
You need to verify your identity. Please download our #WIdentity app from Apple's App Store or Google's Play Store".

No further comment necessary.

RE: https://mastodon.social/@_elena/116775835031505173

#WSocial : "Nous voulons promouvoir la #souveraineté #numérique européenne. Nous sommes conçus en Europe, pour le monde !"

@EUCommission : "Une #Europe forte a besoin d'espaces numériques indépendants. Aujourd'hui nous étendons notre présence sur #W"

W Social : "Vous devez prouver votre identité. Veuillez télécharger notre application #WIdentity sur l'Appstore de #Apple ou le Playstore de #Google

Aucun commentaire.

Vérifiez vous-mêmes (04:30): https://inv.nadeko.net/Vcq4MiabpEQ

"NoGAFAM #Logiciels_libres

#WSocial: "We want to promote European digital sovereignty. We're made in Europe, for the world!"

@EUCommission: "A strong Europe needs independent digital spaces. Today, we’re expanding our presence to W."

W Social: "You need to verify your identity. Please download our #WIdentity app from Apple's App Store or Google's Play Store"

No further comment necessary.

Check for yourselves (04:30): https://inv.nadeko.net/Vcq4MiabpEQ

#BigTech #OpenWashing #EuropeWashing #SovereigntyWashing

Hay que verificar la identidad mediante una aplicación llamada #WIDentity, vamos, que estarás fichado no vayas a decir algo que moleste a alguna empresa o gobierno. De momento voy a apuntarme a la beta a ver en qué acaba todo esto con un alias de correo. En todo caso, todo indica que tendrán tus datos privados.

@Shamhatt @jalefkowit

Oh look all you need to join is download a proprietary identity verification app from the U.S. Big Tech app store of you're choice, scan you're passport photo and you're passport chip and send them a selfie! Signing up for proudly European home grown mass surveillance has never been easier!

https://aseachange.com/@elena/statuses/01KVD55YBYVM3B46ACQTECDMT2

#wsocial #eupol #socialmedia #EU #widentity #ageverification #privacy

Elena Rossini on GoToSocial ⁂ (@[email protected])

How to create an account on #WSocial in 13 easy steps: 1️⃣ choose a username 2️⃣ choose a password 3️⃣ choose your interests 4️⃣ download the #WIdentity app to your phone (two options: Apple AppStore or Google Play Store) 5️⃣ scan a QR code 6️⃣ create a PIN code optional: enable biometrics; re-enter PIN 7️⃣ choose whether you simply want to verify that you're human or if you also want to verify your name 8️⃣ choose the verification method (automatic photo review, request a manual review or scan your passport chip) 9️⃣ scan your passport's picture page 1️⃣0️⃣ scan your passport's chip 1️⃣1️⃣ take a selfie 1️⃣2️⃣ scan a QR code to link the W Identity to your W Social account 1️⃣3️⃣ enter your PIN code Congratulations, you're verified*! (* for two years) Demonstration in all its simple glory here: 📺 : https://inv.nadeko.net/Vcq4MiabpEQ Please save this toot as reference if you ever hear somebody say that IT'S TOO COMPLICATED TO JOIN THE FEDIVERSE BECAUSE YOU NEED TO PICK A SERVER 🤡 #SocialMedia

aseachange.com

How to create an account on #WSocial in 13 easy steps:

1️⃣ choose a username
2️⃣ choose a password
3️⃣ choose your interests
4️⃣ download the #WIdentity app to your phone (two options: Apple AppStore or Google Play Store)
5️⃣ scan a QR code
6️⃣ create a PIN code
optional: enable biometrics; re-enter PIN
7️⃣ choose whether you simply want to verify that you're human or if you also want to verify your name
8️⃣ choose the verification method (automatic photo review, request a manual review or scan your passport chip)
9️⃣ scan your passport's picture page
1️⃣0️⃣ scan your passport's chip
1️⃣1️⃣ take a selfie
1️⃣2️⃣ scan a QR code to link the W Identity to your W Social account
1️⃣3️⃣ enter your PIN code

Congratulations, you're verified*!

(* for two years)

Demonstration in all its simple glory here:

📺​: https://inv.nadeko.net/Vcq4MiabpEQ

Please save this toot as reference if you ever hear somebody say that IT'S TOO COMPLICATED TO JOIN THE FEDIVERSE BECAUSE YOU NEED TO PICK A SERVER 🤡​

#SocialMedia