zlacker

[parent] [thread] 5 comments
1. lern_t+(OP)[view] [source] 2023-07-27 00:16:40
Not the same thing. Attestation doesn't mean you can't run software you want on your own phone, which Android allows despite having build attestation APIs.
replies(5): >>simbol+h >>userbi+Cd >>tehbea+Dv >>rcxdud+vZ >>thefur+tZ1
◧
2. simbol+h[view] [source] 2023-07-27 00:18:34
>>lern_t+(OP)
Not the same thing. Still close enough to trigger irony detectors.
◧
3. userbi+Cd[view] [source] 2023-07-27 01:55:59
>>lern_t+(OP)
It means you can, but may then be ostracised from services for having an "unsupported" environment, which is in many ways even worse because it's leveraging peer pressure.
◧
4. tehbea+Dv[view] [source] 2023-07-27 04:42:10
>>lern_t+(OP)
> Attestation doesn't mean you can't run software you want on your own phone,

I couldn't run my bank's app on an up to date and security patched lineageOS ROM Thanks to safetynet, even trying the hack around approaches.

They'd happily accept the out of date, CVE riddled official ROM however as it had the "popes blessing" from Google.

◧
5. rcxdud+vZ[view] [source] 2023-07-27 09:03:41
>>lern_t+(OP)
It means there's enough software I can't run that its a problem for me. Banking apps, for example.
◧
6. thefur+tZ1[view] [source] 2023-07-27 15:04:42
>>lern_t+(OP)
It is my understanding that attestation could be used to control which software is running on the client's computer prior to granting access to a web service, yes?

Otherwise, what would the point be of using to, say, protect DRM content on a webpage if I can just attach a debugger to the process in question?

Is this not how WEI works?

[go to top]