Comment by mshish
15 hours ago
It's too bad you have to rely on signature spoofing to be able to use this as an alternative (but obviously I understand why). The spoofing looks narrowly scoped on LineageOS, but in general I imagine it creates some risk.
Why can't they signature spoof for those fundamental apps and prevent installing or uninstalling them, similar to how you can't uninstall google stuff on stock android?
Signature spoofing violates the android security model. It means giving privileged access to microG, which means giving privileged access to google. For a privacy project, granting 3rd parties privileged access is unacceptable.
MicroG isn't a 3rd party: it's auditable FLOSS code running on my own device. If you consider microG unacceptable you should never "apt install" anything.
18 replies →
I heard about this, but don't understand the risks?