TL;DR
- Efforts like Graphene OS face increasing pressure from apps that refuse to run on non-standard Android.
- The custom ROM project characterizes Google’s approach to device attestation as incomplete and flawed.
- Graphene OS is prepared to take legal action if Google won’t let it pass Play Integrity checks.
I’ve been tired of “modern” security doing nothing but annoy people. Recently, a Portuguese bank “innovated” by exclusively allowing login only on a mobile device. Yes, a clean web browser with 3FA is not “secure” enough, has to be done on a mobile device. Clearly, desktop PCs are too insecure to conduct transactions.
Therefore, because one does not trust their mobile device. One simply spun up a clean Pixel VM, shared my data with Google and just did their work there. Peak security.
Does the bank staff all work on mobiles?
Goddamn technology stealing black jobs
They are steamrolling usability for elder people with that kind of security measures. I can’t understand how they can get away with this, those bastards.