Comment by gaiagraphia
6 hours ago
Big shout out to Google Play Integrity/Safety Net (or whatever it's currently called).
Was the one thing which ended my couple of years without Google, as my banking apps started banning my phones fingerprint for being insecure.
Seems like in a major part of '''Pax Americana''' is needing to use a Google or Apple fingerprint to participate in society. Makes you laugh when people whinge about China.
Attesting that a closed source device meets arbitrary closed source standards is a necessary evil.
One real world problem is that some existing systems are built relying on the integrity of the components within, i.e. BART in the bay area relies on the BART cards being honest and secure. If iPhones are to be allowed into the system, they also have to be honest and secure.
The capability is being over-used and abused, and we should design systems to never need it, but some do.
In Europe, banking apps block root but still work on a custom OS (like LineageOS) without contactless payments. I guess this is because many people here buy Chinese phones and they just can't ignore them.