this post was submitted on 11 Aug 2024
3 points (100.0% liked)

Technology

59587 readers
2940 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

TL;DR

  • Efforts like Graphene OS face increasing pressure from apps that refuse to run on non-standard Android.
  • The custom ROM project characterizes Google’s approach to device attestation as incomplete and flawed.
  • Graphene OS is prepared to take legal action if Google won’t let it pass Play Integrity checks.
(page 2) 50 comments
sorted by: hot top controversial new old
[–] Unreliable@lemmy.ml 0 points 3 months ago (1 children)

Even just being rooted on the stock Pixel rom is a fight. It's a constant cat and mouse game to pass basic and device integrity, but as of recently a lot of us have been able to pass strong integrity as well which has been nice.

[–] FutileRecipe@lemmy.world 0 points 3 months ago (1 children)

Even just being rooted on the stock Pixel rom is a fight.

That, I can see being more of an issue than an unmodified, trusted 3rd party OS. If I remember right, rooting makes the device fail Verified Boot:

It establishes a full chain of trust, starting from a hardware-protected root of trust to the bootloader, to the boot partition and other verified partitions including system, vendor, and optionally oem partitions.

https://source.android.com/docs/security/features/verifiedboot

[–] Unreliable@lemmy.ml 0 points 3 months ago

Fair point. At least with stock rooted as I said there's ways around it and I can pass all play integrity checks and such.

[–] priapus@sh.itjust.works 0 points 3 months ago (1 children)

I love running a custom ROM, but I'm concerned RCS is going to become a deal break for me :(

I love that text messaging will finally not be complete shit between iOS and Android, but RCS is such a shitty locked down protocol.

[–] FutileRecipe@lemmy.world 0 points 3 months ago (1 children)

but I'm concerned RCS is going to become a deal break for me

For what it's worth, I have RCS working with GrapheneOS. I don't think I did anything special, but it did take awhile. I did see stuff on their forum about others having a bigger issue with it, though.

And of course, I prefer Signal, where possible.

[–] priapus@sh.itjust.works 0 points 3 months ago (3 children)

Interesting. Do you have Google services installed? I use MicroG, which afaik has no RCS support.

load more comments (3 replies)
[–] xia@lemmy.sdf.org 0 points 3 months ago

What get's me is the "this phone cant be trusted" message on boot. Implying oem roms are trustworthy, but nothing i choose.

[–] Eiri@lemmy.world 0 points 3 months ago

I really hope they fix this. When support for my old OnePlus 6 stopped, I was going to install a custom ROM until I realized bank apps, and most security-centered apps, wouldn't work. So I ran with an out-if-date, possibly vulnerable OS for a year until (probably) corrosion from liquid exposure finally did the phone in.

Really bad thing to incentivize.

[–] sbv@sh.itjust.works 0 points 3 months ago

Considering the lawsuits, now seems like a good time.

[–] lupec@lemm.ee 0 points 3 months ago (26 children)

Wow, I legit just ordered a used pixel yesterday to give graphene a try lol. Uncanny timing!

Anyhow, that's great news! I can really see the EU sinking its teeth into this if nothing else.

[–] marcuslee@pawb.social 0 points 3 months ago (1 children)

I would totally buy a Pixel too but apparently most Pixels here are black market and the IMEIs are banned so I don't wanna risk getting one that can't connect to cell networks

load more comments (1 replies)
load more comments (25 replies)
[–] xavier666@lemm.ee 0 points 3 months ago

More power to them

[–] MentalEdge@sopuli.xyz 0 points 3 months ago (2 children)

Hell yes.

It's fucking open source, this is no different from games with intrusive anti-cheat refusing to run on Linux, except it this case it's not even a different OS.

It's monopolistic and anti-user.

load more comments (2 replies)
[–] towerful@programming.dev 0 points 3 months ago (3 children)

The only reason I stopped using grapheneOS was because Google contactless payment didn't work.
Loved everything else about graphene tho

[–] MightyCuriosity@sh.itjust.works 0 points 3 months ago (2 children)

You could use sandboxed google play on the main user or second user.

[–] TurdMongler@lemmy.world 0 points 3 months ago (1 children)

Still can't use tap to pay

[–] rakeshmondal@lemmy.zip 0 points 3 months ago (2 children)

Do you pass play integrity?

load more comments (2 replies)
load more comments (1 replies)
[–] tabular@lemmy.world 0 points 3 months ago (19 children)

I've never used contactless on my phone, I already had a contactless debit card. Why are you, and others, using their phones to pay?

[–] bellafragmento@lemmy.world 0 points 3 months ago (2 children)

I've never used a contactless debit card. I already had a chip and pin debit card. Why are you, and others, using your contactless card to pay?

load more comments (2 replies)
load more comments (18 replies)
[–] JCreazy@midwest.social 0 points 3 months ago (2 children)

I'm sure Google contactless payment works really well when the phone is dead. Or you drop your phone in a toilet or off a bridge. It's far easier to loose a phone than a card in a wallet in your pocket. If you lose your phone, you also lose access to all your money.

load more comments (2 replies)
[–] Wildly_Utilize@infosec.pub 0 points 3 months ago* (last edited 3 months ago) (1 children)

Recently moved to graphene couldn't be happier

I don't care about these apps but it will only get worse over time if not addressed. I could see things as simple as Spotify, Netflix, etc. Refusing to run

I don't use those services either but that's not a future I want

[–] FutileRecipe@lemmy.world 0 points 3 months ago (3 children)

I could see things as simple as...

Last I heard, the McDonalds' app doesn't work, of all things.

https://discuss.grapheneos.org/d/9123-the-mcdonalds-app-doesnt-work/

load more comments (3 replies)
load more comments
view more: ‹ prev next ›