4 ms·
sigh so no more cracked Spotify on Android, I guess. Too bad. A lot of the Android warez scene will take a huge hit from this.
by dartharva 2y ago
sigh so no more cracked Spotify on Android, I guess. Too bad. A lot of the Android warez scene will take a huge hit from this.
- TimeBearingDown 2y agoYep. Could be a big hit to GrapheneOS users. I wonder how Aurora Store will manage.
- stevenAthompson 2y agoLikely through the use of the free market. Privacy conscious folks will just... not use those apps. With any luck app devs will notice that apps with this flag get installed less and stop setting it.
- deleted 2y ago[deleted]
- variadix 2y agoHow so? Assuming they’re modifying the APK they can just remove whatever check is in place. I’m guessing something like microG could emulate this API and always return true as well (though this veers more into DRM bypass which may cause legal trouble for microG).
- zb3 2y agoFor apps that communicate with a server, there will be so called hardware attestation, like the API doesn't just return "true" but a signature which the server can validate. Keys for this are in the TEE/whatever secure element the phone has (and there's a $500K bounty for extracting secrets from the TEE). For apps that don't, Google is currently developing a new obfuscation VM called pairip (that libpairipcore.so). This extracts some java code into a VM, so patching an app is not simply a matter of patching smali code - that VM employs many checksums on its memory.
- deleted 2y ago[deleted]