logoalt Hacker News

torginustoday at 5:48 PM2 repliesview on HN

Isn't this for the same reason why you can't do banking on an unlocked bootloader phone?

There's no way to verify the integrity of the system, and any malicious app can just grab your banking credentials or enable criminals to unlock and drive away with your car.


Replies

HybridStatAnim8today at 6:14 PM

GrapheneOS requires a locked bootloader and supports using deveice attestation via the generic attestation functionality in the Android Open Source Project.

Play integrity is an anticompetitive tool that ignores this, and artificially limits itself on GrapheneOS. It is not due to any incompatibility.

uniq7today at 6:38 PM

> or enable criminals to unlock and drive away with your car

Has this ever happened?

show 1 reply