Google Play’s latest security change may break many Android apps for some power users. The Play Integrity API uses hardware-backed signals that are trickier for rooted devices and custom ROMs to pass.
Technology
75
Beiträge
46
Kommentatoren
10
Aufrufe
-
can confirm, I'm running GrapheneOS right now with F-Droid and some extra repos as my only app store, it works fine for me. but I don't use banking apps (web browsers do fine for that), and I'm using a de-Firebase-d version of Signal (Molly F-Droid) so no issues so far with no GMS and no SafetyNet.
edit: I should add that a new GrapheneOS update just released, this is in the release notes:
- disable anti-competitive code being injected by the Play Store into apps choosing to enable "App integrity > Automatic protection" when there's a valid Play Store source stamp signature (proving that it's an unmodified app from the Play Store, so we aren't disabling an integrity check) since it prevents using the apps on GrapheneOS when apps also choose to enable "App integrity > Store listing visibility" with either the "Device integrity checks" or "Strong integrity checks" values enforcing having a device licensing Google Mobile Services and running the stock OS (circumventing this is protected by the DMCA exemption for jailbreaking)
so it looks like the devs are actively working around this issue and making changes to allow those checks to pass even without the ROM licensing GMS.
The guys over at GrapheneOS removedslap Google regularly, and I love it.
-
This post did not contain any content.
Deleted
-
This post did not contain any content.
If they break custom roms my next phone will have iOS, not stock Android on it.
-
I've always been of the opinion that apps are almost always useless because there is usually a way to do it through a web browser and if there isn't I don't need it. And its usually better because then I have more control (in firefox anyway).
For example the youtube app is entirely unuseable but if I open firefox and use ublock and no script then suddenly I can actually use the website.
Deleted
-
Their goal is to ensure OEMs only bundle Google-approved Android for which Google charges licensing fees and which funnels users into Google services. If a phone won't run your banking app, you probably won't buy it.
Deleted
-
Already does. Some apps just don't work. It'll notif. And say Google api failed to validate login to your Google account. Example app
EBay.Deleted
-
Deleted
No idea but that is one I know about. Apparently the list keeps growing of these API calls being denied or flagged.
-
If they break custom roms my next phone will have iOS, not stock Android on it.
So instead of completely using FOSS softwareonly, you just give in to the corps?
-
Interesting. If I just don't use any apps from the play store and only use stuff from fdroid with no play services I should see no issues though yeah?
Long as you beware that F droid apps could be malware or some other kind of bad actors. It's a free range marketplace just be smart. Just because something is FOSS or open source doesn't mean it's free of bad stuff.
-
This post did not contain any content.
Okay? Like, ive been rawdogging this no Google GrapheneOS thing for 2 Years now, and Ive Bad not a single Problem until now
-
Deleted
Mobile check deposit is a moderately important use case in the USA. It would be possible to do that via the web, but banks usually don't.
Regardless, any apps refusing to run will annoy users, and they would likely blame the one brand of phone where that happens instead of the app developer or Google who actually deserve the blame.
-
This trend of being actively hostile toward your user base is so confusing to me.
.
-
This trend of being actively hostile toward your user base is so confusing to me.
It would be confusing if everyone didn't simply tolerate it.
-
They project that they'll make more money by forcing people to accept surveillance so they can run their apps, even if they lose a few users and app developers by doing so.
Is users stop using custom ROMs, Google loses nothing.
-
This post did not contain any content.
It doesn't make it "tricky", it makes it impossible.
-
Okay? Like, ive been rawdogging this no Google GrapheneOS thing for 2 Years now, and Ive Bad not a single Problem until now
Same. The vast majority of my apps are from F-Droid or directly from the dev, and only a handful are from Google Play, and those are all on a separate profile. There's only 2 or 3 I actually need, and I can probably work around those.
Screw you Google, my next phone will probably be a Linux phone so I don't need to deal with this crap anymore.
-
This post did not contain any content.
If I don't have Play Integrity spoofed, my iPhone friends get an error when they try to RCS message me. This pretty much breaks communication for me.
-
At this point I'm leaving a paper trail in my comments. Sigh, I'll keep it short and sweet.
If you're using ReVanced to hack and get through Duolingo, then I think you should just drop the service. There are countless free resources out there that do a better job, and aren't predatory or make you hate learning. Duolingo is good for beginners and about a month or two of learning. Please let that app go, especially since the CEO thinks AI is a suitable replacement for the education system...
At some point I will but I'm not currently ready to make that transition. My friend and I are using Duolingo together and the social aspect plus the familiarity of the structure have been really helpful
They walked back the ai thing (at least that's my understanding about it, I think there was a statement about it, not that that means much) but it's very clear it wont be something that's likely to work for me long term
But for the time being the structure that it provides and its format has helped me build a routine and actually stay pretty consistent, and I don't think I'm at a place yet where I can transition away from it
But I have checked out the Foss options and there were some neat supplemental tools on f-droid, and at some point I'll go through the play store and try out direct alternatives
-
This trend of being actively hostile toward your user base is so confusing to me.
It’s so confusing it only makes sense to business majors. /s
-
Nothing anti-trust about genuine un-rooted and un-modified devices having secure access to the play store.
It's when you lock out phones that come from Huawei/Oppo etc. because they are Chinese, that you might be able to make a point.It is when the play store is not the only store allowed on devices. Their play services, with this change, are again acting as a monopoly, and again will be again be sued by the eu for violating anti trust laws.
