3 ms·

Please reread my statement. Safetynet may be required if you want to use online banking for most banks. If you don't want to use online banking, then you aren't

Please reread my statement. Safetynet may be required if you want to use online banking for most banks. If you don't want to use online banking, then you aren't subject to the requirements for safetynet, and you're free to roll your own android.

Schroedingersat 4y ago
I read your statement. It's still disingenuous nonsense. And what happens when all the physical branches within 100s of km of you shut down because 'online is so convenient' or your doctor starts using an app that requires it, or it's mandatory to do your university exam or log into your government's tax portal or the next covid where you need it to enter a shop? Or what about when every piece of hardware you can buy has a locked bootloader, or your local phone providers decide to require using their app that puts ads on your lock screen? Or your local taxis get price dumped out of business by uber which requires it?
- userbinator 4y ago
  It's still disingenuous nonsense. How interesting that my original comment which called them out on this blatant shilling has been flagged. While it's not traditional politics, it certainly gives one an appreciation for the effort with which they're attempting to hide their true motives.
- charcircuit 4y ago
  At that point it would be worth investing in a secure device which you can use to do things that require security while you can do your own thing on your insecure device.
  - userbinator 4y ago
    The fact that you're calling it "insecure" is a very telling reflection of how much you support this authoritarian dystopia.
    - charcircuit 4y ago
      Let's say I'm a chat service. In order to authenticate a connection with me you need to give me an access token. When you successfully login I want to give you an access token which you can use in the future to prove who you are. I don't want this token to be stolen by someone else and start sending malware to everyone on your friends list. To avoid this I want to make sure that this token is always securely handled. Remote attestation allows you to prove that you are able to offer this secure envirnment so I can trust you with this token. You may say that you want to be able to steal this token for yourself to make your own chat client. Unfortunately if you can steal the token, then so can malware. It's a trade off between freedom and security. Platforms that suffer from being abused may opt to focus on security over freedom to offer a better service to its users.
      - Schroedingersat 4y ago
        That's not security. That's submission.
        charcircuit 4y ago
        Please elaborate.
        Schroedingersat 4y ago
        Your entitlement to control what your users do in their house or on their device is sickening. Your right to control ends when you send the packet. Requiring that everyone have a telescreen watching them at all times, wear a shock collar that goes off if their heartrate spikes and sing about how they love big brother all day would stop assaults, but that doesn't make it a secure or safe world -- it makes it a totalitarian hellhole. Noone pushing these features cares about security or the firmware would be open and the keys would be changeable, they don't care about user rights or better experience or it wouldn't be coming from microsoft and you would be able to register a public key taking responsibility for your own device that any locally provided service would be required to accept or choose your own CA. You just want the ability to sell removing the nitro button or having a slightly less unusable UI or getting the ads off of the lock screen for $9.99 a month.

Schroedingersat 4y ago

I read your statement. It's still disingenuous nonsense. And what happens when all the physical branches within 100s of km of you shut down because 'online is so convenient' or your doctor starts using an app that requires it, or it's mandatory to do your university exam or log into your government's tax portal or the next covid where you need it to enter a shop? Or what about when every piece of hardware you can buy has a locked bootloader, or your local phone providers decide to require using their app that puts ads on your lock screen? Or your local taxis get price dumped out of business by uber which requires it?

userbinator 4y ago
It's still disingenuous nonsense. How interesting that my original comment which called them out on this blatant shilling has been flagged. While it's not traditional politics, it certainly gives one an appreciation for the effort with which they're attempting to hide their true motives.
charcircuit 4y ago
At that point it would be worth investing in a secure device which you can use to do things that require security while you can do your own thing on your insecure device.
- userbinator 4y ago
  The fact that you're calling it "insecure" is a very telling reflection of how much you support this authoritarian dystopia.
  - charcircuit 4y ago
    Let's say I'm a chat service. In order to authenticate a connection with me you need to give me an access token. When you successfully login I want to give you an access token which you can use in the future to prove who you are. I don't want this token to be stolen by someone else and start sending malware to everyone on your friends list. To avoid this I want to make sure that this token is always securely handled. Remote attestation allows you to prove that you are able to offer this secure envirnment so I can trust you with this token. You may say that you want to be able to steal this token for yourself to make your own chat client. Unfortunately if you can steal the token, then so can malware. It's a trade off between freedom and security. Platforms that suffer from being abused may opt to focus on security over freedom to offer a better service to its users.
    - Schroedingersat 4y ago
      That's not security. That's submission.
      - charcircuit 4y ago
        Please elaborate.
        Schroedingersat 4y ago
        Your entitlement to control what your users do in their house or on their device is sickening. Your right to control ends when you send the packet. Requiring that everyone have a telescreen watching them at all times, wear a shock collar that goes off if their heartrate spikes and sing about how they love big brother all day would stop assaults, but that doesn't make it a secure or safe world -- it makes it a totalitarian hellhole. Noone pushing these features cares about security or the firmware would be open and the keys would be changeable, they don't care about user rights or better experience or it wouldn't be coming from microsoft and you would be able to register a public key taking responsibility for your own device that any locally provided service would be required to accept or choose your own CA. You just want the ability to sell removing the nitro button or having a slightly less unusable UI or getting the ads off of the lock screen for $9.99 a month.