Project ideas from Hacker News discussions.

Brussels launched an age checking app. Hackers took 2 minutes to break it

📝 Discussion Summary (Click to expand)

3 Dominant Themes in This Hacker News Thread

1. Political framing & perceived surveillance motives

“People fighting against this age id app might be paradoxically useful idiots for billion‑dollar investments and lobbying efforts. The demos is once again dragged into the trenches to fight a war they don’t understand.” — [anonymous comment] The discussion repeatedly frames the EU’s age‑verification push as a political/surveillance agenda rather than a purely technical solution, accusing Brussels of using “thought‑crime” rhetoric and large‑scale lobbying to push a controversial mandate.


2. Technical skepticism about zero‑knowledge age verification

“It is my understanding that this is not possible. I would be happy to be shown to be wrong, but to me it seems like you can either prevent people from lending out their credentials, or you can preserve the anonymity of the user, but not both.” — snackbroken

Many commenters doubt that a truly zero‑knowledge proof can simultaneously guarantee adult status and keep the proof anonymous, pointing out that rate‑limiting, revocation, or reuse‑detection inevitably re‑introduces timing or identity side‑channels.


3. Practical deployment & trust concerns

“Let’s say I downloaded the app, proved that I am over 18, then my nephew can take my phone, unlock my app and use it to prove he is over 18.” — mrweasel

The conversation highlights real‑world drawbacks such as mandatory handset restrictions, reliance on Apple/Google attestation, persisting selfie images on‑device, and the ease with which a borrowed phone can be abused to bypass age checks. ---

These three themes—political critique, technical doubt, and implementation‑security worries—capture the dominant viewpoints expressed across the Hacker News discussion.


🚀 Project Ideas

VeriAge SDK - Zero-Knowledge Age Proof Library for Web Apps

Summary

  • Provides a lightweight, open‑source JS/WASM library that lets any website verify a user’s age using ZKP‑based verifiable credentials, without storing personally identifying data.
  • Enables privacy‑preserving age gates for adult‑only content while preventing credential hoarding or reuse.

Details

Key Value
Target Audience Web and mobile developers building age‑restricted services
Core Feature Zero‑knowledge age verification via short‑lived verifiable credentials that can be revoked
Tech Stack WebAssembly, TypeScript, Web Crypto API, libsnark, Node.js backend
Difficulty Medium
Monetization Hobby

Notes

  • Directly answers HN’s repeated requests for “prove age without revealing identity” and solves the revocation problem highlighted by snackbroken.
  • Lowers the barrier for indie developers to comply with emerging EU age‑verification mandates.

CredentialGuard - Revocable, Anonymous Age Credential Wallet

Summary

  • A mobile wallet that stores EU‑Digital‑Identity style age attestations in a hardware‑bound encrypted vault, delivering one‑time use ZKP proofs while supporting remote revocation via short‑lived tokens.
  • Requires biometric or PIN re‑authentication for each proof request, stopping casual sharing of credentials (e.g., a teen using a parent’s unlocked phone).

Details

Key Value
Target Audience EU citizens needing
Monetization Hobby

Read Later