3 ms·

Google's Web Integrity Android API could kill alternative media clients

57 points by leotravis10 3y ago

comex 3y ago
Does the YouTube Android app even use WebView? If not, then this has nothing to do with YouTube. Even if Vanced used WebView, I assume it was pretending to be a regular browser, so there is no way the site could require attestation.
Wowfunhappy 3y ago
Um, how? The alternative client can just pretend to be a generic browser, which wouldn't have an attestation API.
- iris2004 3y ago
  The future Google and others have in mind will require remote attestation for access to media/banking/social media etc. This is part of the groundwork. See also TPM 2.0 requirements for Windows 11 and rapid deprecation of Windows 10.
  - Wowfunhappy 3y ago
    It is reasonable to be concerned about what Google may do in the future. They have too much power. All the tech giants do. However, I can only comment on what Google is actually proposing. In the future, Google could do anything, regardless of whether or not this Android API exists.
  - MuffinFlavored 3y ago
    or like Widevine CDM?
  - gruez 3y ago
    >rapid deprecation of Windows 10. "rapid"? It's in line with their lifecycle policy when windows 10 came out.
    - yjftsjthsd-h 3y ago
      When Windows 10 came out, the messaging was that its lifecycle was probably indefinite: https://www.windowscentral.com/windows-10-may-be-last-version-windows-microsoft-rethinks-operating-system https://www.windowscentral.com/windows-10-may-be-last-versio...
      - gruez 3y ago
        If you read carefully, that claim was made by a "developer evangelist" and was no way an official statement from Microsoft corporate itself.
- mid-kid 3y ago
  This. As long as any client can connect to it without attestation, things like NewPipe will remain working. I don't understand this fearmongering sometimes.
rkagerer 3y ago
If Google pulls a stunt like this could it be grounds for some kind of discrimination lawsuit? It seems to me like they are effectively trying to limit your OS choice to one they have sanctioned. What if you want to compile and run your own OS?
- EMIRELADERO 3y ago
  OS isn't a protected class (though it definitely should be)

57 points by leotravis10 3y ago

Does the YouTube Android app even use WebView? If not, then this has nothing to do with YouTube. Even if Vanced used WebView, I assume it was pretending to be a regular browser, so there is no way the site could require attestation.

Wowfunhappy 3y ago

Um, how? The alternative client can just pretend to be a generic browser, which wouldn't have an attestation API.

iris2004 3y ago
The future Google and others have in mind will require remote attestation for access to media/banking/social media etc. This is part of the groundwork. See also TPM 2.0 requirements for Windows 11 and rapid deprecation of Windows 10.
- Wowfunhappy 3y ago
  It is reasonable to be concerned about what Google may do in the future. They have too much power. All the tech giants do. However, I can only comment on what Google is actually proposing. In the future, Google could do anything, regardless of whether or not this Android API exists.
- MuffinFlavored 3y ago
  or like Widevine CDM?
- gruez 3y ago
  >rapid deprecation of Windows 10. "rapid"? It's in line with their lifecycle policy when windows 10 came out.
  - yjftsjthsd-h 3y ago
    When Windows 10 came out, the messaging was that its lifecycle was probably indefinite: https://www.windowscentral.com/windows-10-may-be-last-version-windows-microsoft-rethinks-operating-system https://www.windowscentral.com/windows-10-may-be-last-versio...
    - gruez 3y ago
      If you read carefully, that claim was made by a "developer evangelist" and was no way an official statement from Microsoft corporate itself.
mid-kid 3y ago
This. As long as any client can connect to it without attestation, things like NewPipe will remain working. I don't understand this fearmongering sometimes.

rkagerer 3y ago

If Google pulls a stunt like this could it be grounds for some kind of discrimination lawsuit? It seems to me like they are effectively trying to limit your OS choice to one they have sanctioned. What if you want to compile and run your own OS?

EMIRELADERO 3y ago
OS isn't a protected class (though it definitely should be)