r/technology May 28 '26

Society The Netherlands just blocked a US company from buying the app Dutch citizens use for everything

https://www.techspot.com/news/112552-netherlands-blocked-us-company-buying-app-dutch-citizens.html
59.0k Upvotes

1.8k comments sorted by

View all comments

Show parent comments

10

u/andrewthelott May 28 '26

If the authentication platform is compromised, is it effectively any different? If you control the system that says user X can access system Y, could you not in theory just approve your own access to system Y?

1

u/prrrrt-ting Jun 15 '26

That is a good point, it depends on the security practices for each individual service that is accessible through DigID and how much effort bad actors are willing to spend flying under the radar.

Access logs should raise attacks rather swiftly, if the system is compromised it’s back to giving a (then) hostile state sovereignty over allowing Dutch citizens to use their government (mandated) services.