4 ms·
We don't receive early access to Android releases or security bulletins from Google. SafetyNet Attestation API was replaced by the Play Integrity API and has b
by grapheneos 2mo ago
We don't receive early access to Android releases or security bulletins from Google.
SafetyNet Attestation API was replaced by the Play Integrity API and has been shut down.
Spoofing the checks needed to pass the Play Integrity device integrity level would only be a temporary workaround. It would stop working and we'd have to keep expanding it. It's easy for them to detect spoofing and ban it. They choose to focus on it happening at scale rather than individuals doing it with rare modifications. GrapheneOS is too widely used to get away with it.
Spoofing the device integrity level will become far more impractical once it requires hardware attestation. Remote key provisioning will also make it a lot more painful to use leaked keys for bypassing root-of-trust-based hardware attestation.