this post was submitted on 16 Aug 2023
80 points (100.0% liked)

Technology

37712 readers
166 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

The discussion I stumbled upon, about this SSH app for Android, is really worrying. Will Google really manage to make it impossible to root your phone?

But there's more to this, it's more complicated. In the Big Picture, Google has every incentive to make these changes — they lead to more security, and they're aligned with Google's corporate goals as well.

  • When talking to users, Google will emphasize control over hackers.
  • When talking to stockholders, Google will emphasize control over users.

Edit: I disagree with "they lead to more security". That's not "security", let's not turn words upside-down.

all 45 comments
sorted by: hot top controversial new old
[–] Da_Boom@iusearchlinux.fyi 38 points 1 year ago (1 children)

It already is. Fuck SafteyNet. It's DRM for phones.

[–] ptasznik666@lemmy.ml 2 points 1 year ago* (last edited 1 year ago) (2 children)

SafetyNet isn't a shit anymore and it could be ez passed on unlocked BL with magisk. Play integrity check is nightmare nowdays specially on stock roms but it also can be passed on some phones/custom roms using lsposed or other magisk modules.

[–] clb92@feddit.dk 2 points 1 year ago

SafetyNet isn’t a shit anymore and it could be ez passed on unlocked BL with magisk

The real challenge has yet to come, from what I've understood, once basic attestation eventually gets abandoned over hardware-backed attestation.

[–] Da_Boom@iusearchlinux.fyi 1 points 1 year ago (1 children)

Tell me what module will allow me to pass CTS on a stock ROM, I can't find fuck all - the most I can find is mods to pass basic Attestation, and "disable" CTS - the problem is that SafteyNet, for phones that are known to have a working CTS, will fail if CTS is disabled - to this day I have 2 apps that I can no longer use as they require CTS.

If you can tell me any app, short of a custom ROM that I can use to bypass this behaviour, it will make me incredibly happy.

(google wallet, which Idgaf about, but also this other app that allows me to block companies from checking my credit score)

[–] ptasznik666@lemmy.ml 1 points 1 year ago* (last edited 1 year ago)

https://github.com/kdrag0n/safetynet-fix/releases

It should work. Flashed this on more than 10 devices stock/custom and it not working only on shitsung Galaxy a13.

My current setup is lineageos with magisk (magisk delta fork) and microg also installed as module and i pass safetynet without a problem.

edit: fuck g00gle

[–] Urist@lemmy.ml 32 points 1 year ago (1 children)

That has to my understanding been Google's project all along (making Android crappy that is). IIRC they bought Android, which due to utilizing the Linux kernel was GPL software. The solution was therefore to seperate Android from all the tools that make Android work, splitting core functionality away from the now AOSP and over to Google services. By abuse of market position we are now in the position where stuff like Google push services, safety net and etc are now basically forcing people into their ecosystem. It will not get better, as witnessed with the company's attempts at making email and most sites on the internet dependant on their ecosystem as well.

[–] BCsven@lemmy.ca 15 points 1 year ago

Thankfully GraphenOS and others are maturing very well and will be a good replacement to googles BS. Hopefully they can keep custom versions alive that will support the apps you want

No they're making it more secure to protect mainstream users, who are the bulk of Android users, at the cost of niche apps.

[–] skycat@beehaw.org 8 points 1 year ago (2 children)

If android were GPL 3 the users would be protected from "tivoization" aka locked hardware. Too bad Google don't want that happen

[–] pkulak@beehaw.org 3 points 1 year ago

And it also couldn’t be installed on any phone.

[–] smileyhead@discuss.tchncs.de 1 points 1 year ago

If at least Linux kernel were GPLv3 we'll be safe from OEMs preventing unlocking bootloader.

If whole Android was GPLv3... Too good to even imagine, it's not going to happen anyway so why even imagine...

[–] NRoach44@lemmy.ml 8 points 1 year ago (1 children)

The linked article — and others — explain that in Android 10+, (a) executable binaries can no longer reside in a read/write directory, and (b) access to /sdcard will go away. Simply put, these changes destroy my application's ability to function, and that of Termux as well.

That sounds like proper security to me? Inability to access the user's storage is a bit lame, but they've been moving to nicer APIs for that anyway.

Android is a mobile phone OS, not desktop / embedded Linux.

[–] lemillionsocks@beehaw.org 4 points 1 year ago

A mobile phone that increasingly has more of your life on it at that. So whereas 12 years ago you might have just lost your contact list and some fart sound boards, today you have bank apps, payment apps, tickets, cards, identification, auto logged in shopping access, and more!

I know more recent versions of android made me curse at google for adding all these guard rails and walls making doing some stuff more difficult.

On the other hand I recently had a phone fall out of my pocket and in the time it took me to get from the corner back to the place I dropped it someone had nabbed it. I was suddenly a lot more appreciative of the restrictions in place that turned my stolen device into a chargeable paper weight.

[–] people_are_cute@lemmy.sdf.org 7 points 1 year ago (2 children)

Aren't there over a hundred OEMs shipping models with their own Android builds? Google will have to convince every single phone manufacturer to lock down their devices the way it wants, which doesn't seem very easy.

[–] Urist@lemmy.ml 6 points 1 year ago

Not when all of them, from a business pov, need to be able to run Google services. As a case study we saw how brutal it was for Huawei to be locked out.

[–] rentar42@kbin.social 6 points 1 year ago

Yes. Everyone can just release a tweaked Android version and Google can't really stop them.

But if you plan to ship Google services (including the play store, which effectively makes a device an "Android device" in many users eyes) then you will have to be able to pass Googles verification suite.

That's already the case today and adding new requirements to that in new Android versions happens all the time.

[–] Zacryon@feddit.de 5 points 1 year ago (1 children)

With Ubuntu Touch, we offer a truly unique mobile experience - a viable alternative to Android and iOS. We provide a free and open-source GNU/Linux-based mobile operating system.

Commercial maintainers

(Companies like Volla, FXP and Fairphone offer compatible Ubuntu Phones as part of their business. Their reputation rests on preventing any major problems and taking a long view. Some devices can even be bought with Ubuntu Touch already installed!

https://devices.ubuntu-touch.io/

[–] ExLisper@linux.community 1 points 1 year ago (2 children)
[–] festus@lemmy.ca 2 points 1 year ago

Not really, no. I used Ubuntu Touch for about a year a few years ago and the method for running Android apps is essentially to run an emulator layer on the phone (anBox), which in practice is nearly unusable. It may have improved somewhat since then but I suspect you're still going to need a relatively beefy phone at minimum to run whatever solutions there are at a decent speed.

[–] Zacryon@feddit.de 1 points 1 year ago

Not natively, but with help of containers. I found two projects and to be honest I don't know much about them yet, as I still use Android for device warranty reasons. (But I am eager to try as soon as the warranty expires.)

Anbox (discontinued since this year):

Waydroid took over and looks promising. https://waydro.id/

Of course you could also run Android emulators, but such container applications like Waydrois are more efficient.

[–] HidingCat@kbin.social 4 points 1 year ago (2 children)

A phone will be an appliance, and I'll just do very basic stuff with it. Real computing will be done at the desktop anyway.

[–] phario@lemmy.ca 9 points 1 year ago* (last edited 1 year ago) (2 children)

Nah this is changing.

This of course is what they said about tablets. Now people are replacing desktop or laptop workflow with tablets, or alternatively tablets are being designed with removable keyboards so the lines are blurred.

I know scientific researchers who now only travel to conferences with tablets instead of their laptops.

Finally, I predict that we’re moving to cloud computing. It’s the natural way. You VPN into a network and your computing is done on a cluster or on a central computer.

The same is already happening for gaming. People are connecting controllers and glasses like the Xreal Air to phones, then networking into a computer to play a desktop game on their phone.

[–] cmnybo@discuss.tchncs.de 3 points 1 year ago

I couldn't imagine ever replacing a PC with a tablet. Almost none of the software I need is available as an app and what is available just isn't the same. The lack of processing power is also a big issue. A cheap laptop is much more powerful than an expensive tablet. Also, I don't want a tablet that is pretty much owned and controlled by Google or Apple.

Running interactive software in the cloud doesn't work very well if you don't have a good, low latency fiber internet connection.

load more comments (1 replies)

This is my take on it as well. My phone is for basic quick communication. My real productivity happens on my laptop and desktop.

[–] Leafeytea@beehaw.org 1 points 1 year ago (2 children)

Have read the thread, since I am currently considering replacing my dinosaur Samsung S5. It still works like a charm and I have zero issue with it doing what I need it to do. I long ago unlocked and rooted it. I was starting to feel like replacing it may be wise before it should suddenly not work out of the blue since it's so old.

My question is: should I be moving on to iPhone if these sort of issue with newer Androids are going to make them more difficult to use as I want? or do iPhones have the same problems? Forgive my ignorance since I know nothing about iPhones. I am just curious.

[–] averyminya@beehaw.org 3 points 1 year ago

No definitely not.

You'd want basically any phone that has a build for lineageOS if you really care about that sort of stuff. But in all honesty, if you buy a phone that has what you want without having most of what you don't want (LG, Sony are two that come to mind) they'll last you a good 5 years by which point someone will have made a different OS for the phone.

[–] jemorgan@lemm.ee 1 points 1 year ago

I was a dedicated Android user from the Galaxy S2 to the Pixel 3, and was on Google phones since the nexus 5. I always had my phone rooted, and until it became too inconvenient, I was really into ROM hopping.

When I got the nexus 5, I vowed not to get another Samsung phone because of how hard they were making it to unlock your bootloader. Then on the pixel 3, Safety Net kept realizing I was rooted and breaking the apps I needed for work, and I realized I was having to plug my phone into my computer to fix things way more than I wanted to. I ended up just running stock because I didn’t want to worry about not being able to log into my mobile banking when I was out of the house.

When I was looking at replacing my pixel 3, it was clear that Google was no longer as root friendly as they once were, so I started looking at other Android options. I wasn’t impressed. It occurred to me that the main reason I’d always avoided Apple was because of the lack of root support

So I went out on a limb and got the iPhone 12 Pro, and to my surprise, I loved it. If you’ve already accepted the idea of leaving the FW stock, it’s perfect. I get updates the day they roll out, the hardware is so much nicer than anything I’ve seen from Android (that’s partially subjective), the software/hardware integration is so good that it blows me away. I don’t know if I’ve ever seen so much as a UI stutter, I still get a solid 2 days/two nights of battery life on a >2 year old phone. The 3rd party apps are more consistently high-quality, and the native apps actually feel consistent and thought out, rather than feeling like the work of 10 different teams throwing stuff at the wall to see what sticks. And a lot of people don’t care about this, but it’s a huge deal to me; Google is an ad-tech company that sells user data to advertisers. Apple is a hardware company that sells devices to users. The difference in their policies on user privacy are stark, which means I no longer have to worry about every website I visit knowing what prescriptions I’m taking.

Siri is useless, especially compared to Google assistant. Notifications are better on Android. Ecosystem integration is a huge selling point for Apple products, IT really can’t be overstated how well things work together, but that only matters if you are open to owning an Apple Watch, AirPods, AirTags, an iPad and a MacBook. I miss the *variety * of apps on the Play Store, especially free ones.

I’m not a loyalist for either team, they’ve each got pros and cons, but my best effort at an objective analysis makes me feel that the iPhone is a lot better of a fit for someone like me.