Comment by brnt

7 days ago

Fuck Play Integrity, which is what Google implements, with these drawbacks very much intentionally in place, and 'recommended' banks implement for security. Fuck Google for doing everything they can to make custom roms fail these API's ever more.

There is an alternative* of which I haven't heard in a while.

* https://uattest.net

Fuck all of that. We don't need attestation. We have been handling money online without attestation for over 30 years. Sandboxes and operating system isolation is only getting better. Pwned devices is not the main problem, people getting phissed is the main problem. You don't need attestation to defend against that.