Google to require developer verification to install and sideload Android apps

Re:Google to require developer verification to install and s... by Sayrus on Tuesday August 26, 2025 @09:24AM (#45026213)

And those apps use MEETS_DEVICE_INTEGRITY rather than MEETS_STRONG_INTEGRITY so a compromised device can absolutely be used to access critical services. (Usually because strong integrity is unsupported on old devices)

This reminds me of providers like Xiaomi making it harder to unlock the bootloader due to phones being sold as new but flashed with a compromised image.

[ Parent | on HN ]

Re:Google to require developer verification to install and s... by pona-a on Tuesday August 26, 2025 @01:07PM (#45029379)

Maybe a good compromise is to change the boot screen to have a label that the phone is running an unofficial ROM, just like it shows one for unlocked bootloaders? If the system can update that dynamically based on unlock state, why can't it do it based on public keys? Might also discourage vendors/ROM devs from using test keys like Fairphone once did.

[ Parent | on HN ]

Re:Google to require developer verification to install and s... by drewbug on Tuesday August 26, 2025 @01:23PM (#45029600)

Pixels with, for example, GrapheneOS already do exactly that:

"Your device is loading a different operating system."

[ Parent | on HN ]