GrapheneOS attestation compatibility guide
grapheneos.org
Guide on using remote attestation in a way that's compatible with GrapheneOS.

cross-posted from: https://slrpnk.net/post/15995282

Real unfortunate news for GrapheneOS users as Revolut has decided to ban the use of ‘non-google’ approved OSes. This is currently being posted about and updated by GrahpeneOS over at Bluesky for those who want to follow it more closely.

Edit: had to change the title, originally it said Uber too but I cannot find back to the source of ether that’s true or not…

  • zako@lemmy.world
    721·
    13 days ago

    the problem here is not the banks or apps, the problem is Google Play Integrity API, which is supposed to enforce to run apps in secured phones and it is used to ban secured ROMs such as GrapheneOS and it allows to run apps on outdated phones without security patches.

    • kevincox@lemmy.ml
      1203·
      13 days ago

      which is supposed to enforce to run apps in secured phones

      The point of the Google Play Integrity API is to ensure that the user is not in control of their phone, but that one of a small number of megacorps are in control.

      Can the user pull their data out of apps? Not acceptable. Can the user access the app file itself? Not acceptable. Can the user modify apps? Not acceptable.

      Basically it ensures that the user has no control over their own computing.

      • umami_wasabi@lemmy.ml
        26·
        13 days ago

        It’s simply the “secure” isn’t meant for users but the cooperations. Make it “secure” to their business.

        • NotMyOldRedditName@lemmy.world
          19·
          13 days ago

          It’s used to help secure the businesses app yes. It helps with things like preventing resource abuse which would cost the company money. E.g. querying mass amounts of data on a loop to increase the companies bill.

      • zako@lemmy.world
        4·
        12 days ago

        If you install GrapheneOS, you do not need root, so GrapheneOS is in control of the phone not the user. The key here is if GrapheneOS is secure enough to be certified by Google Play Integrity API. is it security or other issue? perhaps Google is not supporter of FOSS ROMs, perhaps it is not fun of how GrapheneOS removes permissions to Google Apps, …

        If it is not security, this is a kind of monopoly to control which ROMs are allowed to run apps.

      • Anivia@feddit.org
        1·
        12 days ago

        Can the user access the app file itself? Not acceptable

        This is possible on any Android phone, no root or custom rom required