News for hackers. Stuff that matters.

A comment on On non-rooted Android 17, ADB uninstall of system apps fails. Parent comment

Re:On non-rooted Android 17, ADB uninstall of system apps fails by Telaneo on Thursday August 06, 2026 @09:35AM (#49196472)
Many of the apps that people need to have smartphone to access will not run in an Android sandbox. Banking apps are the obvious example.

Not to mention that the options outside iOS and Android are slim and for the most part bad (or atleast simply even worse than those).

[ Parent | on HN ]
Re:On non-rooted Android 17, ADB uninstall of system apps fails by drdexebtjl on Thursday August 06, 2026 @10:12AM (#49196956)
Is it because the sandbox is bad and does not perfectly simulate the computing environment of a real device?

Because to me it sounds like a cat and mouse game that Google and banking apps are destined to lose.

[ Parent | on HN ]
Re:On non-rooted Android 17, ADB uninstall of system apps fails by bilkow on Thursday August 06, 2026 @02:40PM (#49200596)
It's because of the Play Integrity API, which AFAIK runs downloaded binaries in the DroidGuard environment: https://en.wikipedia.org/wiki/Play_Integrity_API

The strongest levels require hardware key attestation (which, in my understanding, uses a certificate that's baked in secure hardware and signed by Google): - https://grapheneos.org/articles/attestation-compatibility-gu... - https://developer.android.com/privacy-and-security/security-...

[ Parent | on HN ]
Re:On non-rooted Android 17, ADB uninstall of system apps fails by wolvoleo on Saturday August 08, 2026 @12:24AM (#49218882)
Still. It must be possible to extract such a key. Even hardware key storage is not 100% safe.
[ Parent | on HN ]
Re:On non-rooted Android 17, ADB uninstall of system apps fails by lucianbr on Thursday August 06, 2026 @02:49PM (#49200720)
There is hardware attestation that prevents a perfect sandbox from being possible.

Unless you know how to build a sandbox that can simulate a TPM with a key inside that only Google knows. Or something like that. I'm not an expert but there's plenty of information on the internet about this. It's definitely more than "the sandbox is buggy".

[ Parent | on HN ]