News for hackers. Stuff that matters.
Re:Dutch 'idealist' bank ASN blocks non-Google Android, incl... by brnt on Friday November 06, 2026 @06:43AM (#50391179)
To whom it may concern:

There is an alternative to Google's proprietary and unprivate integrity API that every bank now uses (and is at the root cause of this issue):

https://uattest.net

Spread the word.

Re:Dutch 'idealist' bank ASN blocks non-Google Android, incl... by microtonal on Friday November 06, 2026 @06:56AM (#50391298)
Nah. Unified Attestation is an initiative by some some companies that really have terrible security (years old kernels, drivers, firmware, often way behind on Android updates). They are also known for campaigns against GrapheneOS, including astroturfing. They also do a fair amount of eurowashing (in particular Volla, who sell UAE/Chinese phones as a European phone with a markup of hundreds of Euros).

If Unified Attestation would become a standard, they would use it to entrench themselves over GrapheneOS et al.

AOSP has an API for remote attestation attestation. Banks should just come up with a list of signing keys to be trusted. Heck, they can start here:

https://grapheneos.org/attestation.json

Re:Dutch 'idealist' bank ASN blocks non-Google Android, incl... by hWuxH on Friday November 06, 2026 @03:53PM (#50398371)
Other company, same shitty anti-user, anti modding, anti open source mentality and security theater. Nah.