[palata]

> there is no single government id in the UK at the moment, they currently do not control my identity

Wait, so you live in a country where there is no government that can provide an ID? How does it work when you travel abroad? Do you have multiple legal identities, with different names and nationalities, that cannot be individually tracked back to one government?

> you specifically talked about an OS without user changeable software, thats the definition of open source

No? Open source is about your ability to reuse the code. You can modify and install Android (or let's say AOSP) on most Android devices (look at the list of devices supported by LineageOS for instance).

The one thing you cannot do is modify it and get your changes signed by Google.

Remote attestation is about preventing you from leveraging open source software, but the software is still open source.

[mcfedr]

they provide passports for travel, driving licences for driving, national insurance number for taxes, but its not a single id that everyone is required to have

there is no point in it being open source if i cannot modify and run it

[palata]

> they provide passports for travel, driving licences for driving, national insurance number for taxes, but its not a single id that everyone is required to have

I am not sure what point you are trying to make. The government controls your passport, your driving licence, your national insurance number for taxes, but because those are 3 different IDs, it doesn't count as "your government controls your ID"?

Feels like you're just nitpicking for the sake of it.

> there is no point in it being open source if i cannot modify and run it

Well I for sure hate the idea of remote attestation, I agree with you on that. I was just pointing out that saying "it's not possible to have remote attestation on an open source system" is wrong: it's possible, that's a big part of why "they" like remote attestation: because they have control even if you can tamper with your system.