Comment by brnt
7 days ago
Fuck Play Integrity, which is what Google implements, with these drawbacks very much intentionally in place, and 'recommended' banks implement for security. Fuck Google for doing everything they can to make custom roms fail these API's ever more.
There is an alternative* of which I haven't heard in a while.
Fuck all of that. We don't need attestation. We have been handling money online without attestation for over 30 years. Sandboxes and operating system isolation is only getting better. Pwned devices is not the main problem, people getting phissed is the main problem. You don't need attestation to defend against that.
How is that alternative supposed to work without OEM support?