Comment

Comment by Speedy218

Sadly "non-certified" phones come at a big consequence, I wrote a big article on it on HN but I'll give you the summary, Google has added in "play integrity" into all certified phones which detects if your bootloader is unlocked or your phone is modified in some way, and apps can (and do) request this device verdict on your device to choose to deny you service. Bank apps, basically all NFC wallet apps like Google Wallet, and games do this, and it's a massive headache. Good apps also make this a server-side check meaning you cannot bypass this without leaking your phone's special hardware attestation key stored in 50 different layers of security in the actual CPU with tamper detection.
parent Speedy218 1 year ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton