4 ms·
The problem is SafetyNet uses remote attestation. And if the bank app is implemented properly that won't work because the server will check they attestation and
by arsome 5y ago
The problem is SafetyNet uses remote attestation. And if the bank app is implemented properly that won't work because the server will check they attestation and fail your login. They very well may not bother with this though since they offer a web version anyways... which kind of makes the whole idea of putting root checking in the app pointless.
Right now at least, there's no hardware attestation on many devices so you can just install Magisk and hide the fact you're rooted pretty easily from SafetyNet and still pass.
- dane-pgp 5y ago> Right now at least, there's no hardware attestation on many devices How long do you think it will be before a country requires that all smartphones support this? And how long before it is a requirement for laptops too?
- blibble 5y agonot sure about smartphones but Windows 11 will require a TPM, presumably for remote attestation
- dane-pgp 5y agoThat's a good point. Anyone who suspects that the government pressured Apple to add on-device file scanning (under the guise of "think of the children") should also conclude that making TPMs a requirement is intended to lay the groundwork for a future legislative change (presumably under the guise of "cyber-security").