Google shifting to “upstream first” Linux kernel approach for Android features

Re:Google shifting to “upstream first” Linux kernel approach... by arsome on Thursday September 23, 2021 @07:52AM (#28627909)

The problem is SafetyNet uses remote attestation. And if the bank app is implemented properly that won't work because the server will check they attestation and fail your login. They very well may not bother with this though since they offer a web version anyways... which kind of makes the whole idea of putting root checking in the app pointless.

Right now at least, there's no hardware attestation on many devices so you can just install Magisk and hide the fact you're rooted pretty easily from SafetyNet and still pass.

[ Parent | on HN ]

Re:Google shifting to “upstream first” Linux kernel approach... by dane-pgp on Thursday September 23, 2021 @12:57PM (#28631875)

> Right now at least, there's no hardware attestation on many devices

How long do you think it will be before a country requires that all smartphones support this? And how long before it is a requirement for laptops too?

[ Parent | on HN ]

Re:Google shifting to “upstream first” Linux kernel approach... by blibble on Thursday September 23, 2021 @01:11PM (#28632063)

not sure about smartphones but Windows 11 will require a TPM, presumably for remote attestation

[ Parent | on HN ]

Re:Google shifting to “upstream first” Linux kernel approach... by dane-pgp on Thursday September 23, 2021 @02:28PM (#28633145)

That's a good point. Anyone who suspects that the government pressured Apple to add on-device file scanning (under the guise of "think of the children") should also conclude that making TPMs a requirement is intended to lay the groundwork for a future legislative change (presumably under the guise of "cyber-security").

[ Parent | on HN ]