← Back to context

Comment by realusername

5 hours ago

Then it's a matter of personal opinion, I would not count any of the ones you listed as valid.

Integrity doesn't prevent customers to download a fake banking app, DRMs should be legally banned to be honest (sorry/not sorry media companies) and passports are best in physical form.

For company usage, locking the bootloader accomplishes the same thing.

As for bots, it doesn't prevent bots as you have unmodified device farms on racks. It's actually how ad fraud is done at the moment, they don't bother modifying the devices.

Pushing integrity even more will just funnel even more money to this ad fraud mafia as they will have a new source of revenue.

I, for one, like streaming apps enough that I don't want to go back to locked-down, expensive DVD players. The alternative to DRM isn't "no DRM", it's "no content".

Integrity detection means criminals cannot just inject some code into an existing banking app APK and call it a day. The hacked app won't generate valid HTTPS calls when properly validated. You can still phish users, but instead of automated online phishing panels, you need someone with a physical phone copying everything the user enters. It significantly raises the bar for these criminals.

If this stuff wasn't available, we just wouldn't have a lot of useful apps that we do today. The technology itself isn't bad per se, but the combination of a lack of hardware manufacturer support (for doing things like locking down bootloaders), custom ROM support (because bootloaders aren't locked down anyway), and app developer interest (see the whole GrapheneOS story) are what causes problems. Restricting the technology because the companies you deal with are shit is a bad solution in my opinion, because if they are motivated to be shit, they will find other ways to be shit.

For instance, someone set up an alternative attestation company that's even worse than Apple and Google, and if it weren't for Play Integrity, they'd be making the APIs and whitelists instead of Google.

  • > I, for one, like streaming apps enough that I don't want to go back to locked-down, expensive DVD players. The alternative to DRM isn't "no DRM", it's "no content".

    That statement is simply not true. The demand for streaming services would still be there. There would simply be even more illegal alternatives than there already are, so companies would still be forced to offer movies and TV shows via streaming. They only have the choice between offering DRM-free content and making money, or making no money while people watch it anyway.

  • >I, for one, like streaming apps enough that I don't want to go back to locked-down, expensive DVD players. The alternative to DRM isn't "no DRM", it's "no content".

    that's a false dichotomy since piracy exists. Stop giving them money until their behavior changes. If it doesn't... oh well, you still get a better service.

    • > Stop giving them money until their behavior changes I did, for the longest time, because none of the streaming platforms worked on Linux. Their behaviour did not change. The tiniest sliver of a percentage of people who actually care about this aren't enough to move the needle for the multi billion dollar entertainment industry. The population at large is fine with DRM.

      Piracy isn't even a better service at all. Almost nothing in my native language is available on pirate sites unless you pay more than the subscription service charges. Subtitles take three or four internet searches and sometimes aren't available at all. Audio tracks default to Russian or Italian or Spanish for English-language shows. I have set up a whole Rube Goldberg machine of radarr/sonarr/lidarr + bazarr + prowlarr + Deluge + Jellyfin to watch stuff and only after all that did piracy became slightly less of a bother.