upvote

points

by yaro3306 hours ago |
comments
upvoteby Zak5 hours ago|
next
[-]
I'm skeptical.

An immutable OS install and app sandboxing by default provide a lot of security. Those are present on third-party Android distributions that don't pass SafetyNet. Some users of those add root access so they can let a handful of apps out of the sandbox, but I'm willing to bet most of those are tech experts with better security habits than the average person.

Show me examples of actual data breaches and account takeovers SafetyNet would have stopped if you really want to defend this position.

reply
upvoteby SkiFire136 hours ago|
prev|
next
[-]
It's an excellent system that forbids up-to-date open source systems, but is completely ok with systems that are several years behind in security patches.

It's just a way for app makers to point their finger at someone else.

reply
upvoteby yaro3305 hours ago|
parent|
[-]
It's a system that allows even those old systems to still use banking reliably and securely, so yeah I'd say it's an excellent system. As far as GrapheneOS goes - now that they're partnered with Motorola they might actually get some certification, along with a proper security audit from Google. Not sure what the details of the supported functionality are gonna be there.
reply
upvoteby SkiFire132 hours ago|
parent|
next
[-]
> It's a system that allows even those old systems to still use banking reliably and securely

No, Play Integrity labels those old systems as secure, _even though they are not secure_ due to lacking years of security patches.

Play Integrity does not prove that something is _secure_, only that the OS that is running _was approved by the phone maker_.

reply
upvoteby ada-h00k5 hours ago|
parent|
prev|
next
[-]
Older Android phones that haven't received security updates for two years are not secure. The Play Integrity check therefore does not mean that the phone is secure, but only that it is a certified smartphone that came with Google services preinstalled.
reply
upvoteby yjftsjthsd-h2 hours ago|
parent|
prev|
[-]
> It's a system that allows even those old systems to still use banking reliably and securely

This is the crux of your entire argument, so you kind of need to actually substantiate it. Does Play Integrity catch an app from to Play Store using an exploit against a comically ancient vendor kernel to do anything it wants? How?

reply
upvoteby Y_Y6 hours ago|
prev|
[-]
Ultimate seamless experience at the best value, best-in-class modern technology with intuitive mouth feel?
reply