3 ms·

If your app can be manipulated to your disadvantage by the user, then you are putting undue trust in client-side software, and you need to rearchitect your serv

• brookst 2y ago
  Security isn’t binary, it’s about layers and probabilities. A client that attests play integrity is less likely to be an attacker than one that isn’t. That doesn’t mean it’s impossible to use an attested device in an attack, or that all non-attested devices are malicious. A good heuristic is that if you find yourself using absolutes and dramatic, insulting language… you do not have a valuable insight about security.
  • Hizonner 2y ago
    > Security isn’t binary, it’s about layers and probabilities. A truth frequently abused to excuse obviously bad practices. > A client that attests play integrity is less likely to be an attacker than one that isn’t. A comfortable, yet completely unjustified, assumption.
    • protimewaster 2y ago
      > A comfortable, yet completely unjustified, assumption. I agree. Knowledgeable users are passing Play Integrity on rooted devices. The idea that these knowledgeable users who are willing to bypass local security checks are more trustworthy than users who honestly fail the security test feels like a strange stance on security. If you want assurance that your code won't run on modified devices, don't let users run the code at all. Have them come into the bank branch and use hardware that you control.