this post was submitted on 10 Mar 2026
169 points (98.8% liked)

Android

21570 readers
307 users here now

The new home of /r/Android on Lemmy and the Fediverse!

Android news, reviews, tips, and discussions about rooting, tutorials, and apps.

🔗Universal Link: !android@lemdro.id


💡Content Philosophy:

Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.


Support, technical, or app related questions belong in: !askandroid@lemdro.id

For fresh communities, lemmy apps, and instance updates: !lemdroid@lemdro.id

💬Matrix Chat

💬Telegram channels / chats

📰Our communities below


Rules

  1. Stay on topic: All posts should be related to the Android OS or ecosystem.

  2. No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to !askandroid@lemdro.id.

  3. Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to !androidmemes@lemdro.id.

  4. No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.

  5. No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.

  6. No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.

  7. No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.

  8. No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.

  9. No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!

  10. No affiliate links: Posting affiliate links is not allowed.

Quick Links

Our Communities

Lemmy App List

Chat and More


founded 2 years ago
MODERATORS
 

A new European initiative dubbed UnifiedAttestation aims to build a free and open-source alternative to Google’s Play Integrity checks. The initiative is backed by smartphone maker Volla, while other partners include /e/OS maker Murena and the team behind iodé OS. The feature will be distributed under an Apache 2.0 license.

all 39 comments
sorted by: hot top controversial new old
[–] possiblylinux127@lemmy.zip 13 points 3 hours ago

Open source DRM is still DRM

[–] dadarobot@lemmy.sdf.org 40 points 5 hours ago (2 children)

this old initiative could help: browsers

[–] issei6969@futurology.today 10 points 3 hours ago (1 children)

This older initiative can help: Pay cash for everything

[–] blinfabian@feddit.nl 5 points 2 hours ago

this older initiative can help: dont pay

[–] TMNT_In_My_Septic_Tank@lemmy.org 5 points 4 hours ago (1 children)

Right? Why put all these apps with extra trackers on your shit anyway?

[–] marito@lemmy.world 4 points 4 hours ago

This is what I used to do until my bank stopped supporting Zelle on the mobile website.

[–] brokenwing@discuss.tchncs.de 52 points 6 hours ago (4 children)
[–] barnaclebutt@lemmy.world 41 points 6 hours ago (2 children)

Jeez. They really don't. And, I guess they shouldn't. Their stance is that device certification shouldn't be necessary in the first place which I agree with considering this is not done for computers (don't do this tech bro shitheads).

[–] RobotToaster@mander.xyz 10 points 6 hours ago (1 children)

Grapheneos are also against allowing users root access, which is fine on PCs.

[–] Zak@lemmy.world 7 points 4 hours ago (1 children)

Are they, or are they against GrapheneOS itself supporting it?

Those are different. GrapheneOS exists to be security-hardened and usually should choose security over utility where there's a conflict.

[–] Onomatopoeia@lemmy.cafe -4 points 4 hours ago (1 children)

They arebgwnweally against root, as it "breaks security" in their mind.

Nevermind that all systems, everywhere, have root for some account/some account is root.

[–] zak@social.goodanser.com 4 points 3 hours ago

It breaks their sandboxing model, which limits the impact of malicious/compromised apps.

To be clear, I'm not arguing against root here. I daily a rooted phone, and I believe if it's impossible to get root on something, it isn't really yours. You can get root on GrapheneOS; they just discourage it because they're strongly focused on security.

They're right. If a bug in AdAway, which needs root to write /etc/hosts caused it to fetch and execute malicious code, the malware could do anything I can do to my device. The scenario is plausible; it routinely fetches blocklists, and I imagine a sophisticated enough attacker could compromise the delivery mechanism.

I don't worry about that scenario because it's unlikely that kind of attacker will target me. GrapheneOS is meant for people who do have to worry about that kind of thing.

@Onomatopoeia @Zak@lemmy.world

[–] Ilandar@lemmy.today 15 points 5 hours ago (4 children)

At this point it's like an unwritten rule of the internet that every GrapheneOS account comment chain will eventually regress into cooker conspiracy theories about other privacy ROM projects. And I still have no idea why Micay has started lumping iodé in with them, because I have been following that project closely for many years and no one there gives a shit about GrapheneOS. As in, they literally do not talk about Graphene (or any other projects, for that matter). They never compare themselves to GrapheneOS, on security or anything else. It's the most bizarre, one-sided internet war.

[–] timbuck2themoon@sh.itjust.works 5 points 3 hours ago

Because that dude is nuts. He does a disservice to graphene PR anytime he speaks.

[–] possiblylinux127@lemmy.zip 3 points 3 hours ago

The Graphene devs and user base behave like a cult

[–] darklamer@feddit.org 2 points 4 hours ago (1 children)

And I still have no idea why Micay has started lumping iodé in with them, because I have been following that project closely for many years and no one there gives a shit about GrapheneOS.

I don't know, but it seems to me that you might have a rather good guess as to why right there.

[–] Ilandar@lemmy.today 1 points 3 hours ago (1 children)

As in, they literally do not talk about Graphene (or any other projects, for that matter).

???????????????

[–] darklamer@feddit.org 1 points 3 hours ago

It's quite common for people to feel hurt when they feel ignored.

[–] Zectivi@piefed.social 2 points 4 hours ago

As much as I enjoy GrapheneOS, when I hit that part of the chain, I close out. I’m tired of hearing how has attacked GrapheneOS. They used to @ everyone in matrix for it asking for backup, which is why I’m not in their rooms now.

[–] pseud@lemmy.zip 17 points 6 hours ago

Namely,

Having a European version of the Play Integrity which permits people to use insecure products from specific European companies participating in it while disallowing using arbitrary hardware or software is the opposite of a solution. It's more of the same anti-competitive garbage.

Hate to say it but he's probably right.

[–] MonkderVierte@lemmy.zip 3 points 5 hours ago* (last edited 5 hours ago) (1 children)

Yeah whatever. They are their own bubble.

[–] BestBouclettes@jlai.lu 12 points 5 hours ago (2 children)
[–] hitmyspot@aussie.zone 3 points 5 hours ago (1 children)

They are if banks don’t allow their apps to be functional on grapheneos.

[–] CorrectAlias@piefed.blahaj.zone 2 points 2 hours ago

I have never had an issue with banking apps so long as exploit compatibility mode is enabled for them.

[–] xyguy@startrek.website 17 points 7 hours ago (2 children)

I appreciate the effort but my banking apps still rely on 2FA through SMS. They aren't interested in implementing a technology that is more secure or even one that is different than what they have already, especially for a fraction of a fraction of a fraction of their user base.

[–] darklamer@feddit.org 5 points 4 hours ago (1 children)

I appreciate the effort but my banking apps still rely on 2FA through SMS.

And you trust them with your money!?!

[–] xyguy@startrek.website 2 points 4 hours ago (1 children)

Fair point but I am not going to do all my shopping exclusively out of catalogs and mail in my payment with cash.

Its a shitty situation but short of government regulation (ha) nothing is going to change.

[–] Lumisal@lemmy.world 2 points 3 hours ago (1 children)

Are there no other banks in your area?...

[–] xyguy@startrek.website 3 points 3 hours ago (2 children)

Yes and as far as I can tell, they all have that as their system. Also the changing of the password every quarter which has proven to actually decrease password security and increase password reuse.

I should say, if anyone knows a bank with proper modern online security protocols I am willing to listen.

[–] darklamer@feddit.org 1 points 3 hours ago

I should say, if anyone knows a bank with proper modern online security protocols I am willing to listen.

I'm personally quite fond of Wise.

[–] Ulrich@feddit.org 3 points 5 hours ago

Seriously, this shit should be illegal already