Comment by paulnpace
5 days ago
I didn't have time to review it, but there is some way to explicitly trust GrapheneOS. Maybe that is what they mean?
5 days ago
I didn't have time to review it, but there is some way to explicitly trust GrapheneOS. Maybe that is what they mean?
The way they fixed compatibility with GrapheneOS varies. Our post says around 90% of banking apps are working and around a dozen are known to have specifically made changes to support GrapheneOS. That mainly involves them no longer banning using it one way or another. Some did so by verifying GrapheneOS via the Android hardware attestation API but others simply fixed broken anti-tampering checks. Some apps including certain banking apps relaxed their Play Integrity API checks but we expect they'll undo that and use Android hardware attestation to support multiple alternatives otherwise banned by it. We don't choose what these apps do and would prefer if they entirely removed all of the misguided anti-tampering code and restrictions on what can be used. It still causes problems regularly for apps permitting GrapheneOS since the checks often have bugs or they don't permit newly supported devices promptly.