this post was submitted on 10 Mar 2026
265 points (99.3% liked)

Android

21591 readers
167 users here now

The new home of /r/Android on Lemmy and the Fediverse!

Android news, reviews, tips, and discussions about rooting, tutorials, and apps.

🔗Universal Link: !android@lemdro.id


💡Content Philosophy:

Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.


Support, technical, or app related questions belong in: !askandroid@lemdro.id

For fresh communities, lemmy apps, and instance updates: !lemdroid@lemdro.id

💬Matrix Chat

💬Telegram channels / chats

📰Our communities below


Rules

  1. Stay on topic: All posts should be related to the Android OS or ecosystem.

  2. No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to !askandroid@lemdro.id.

  3. Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to !androidmemes@lemdro.id.

  4. No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.

  5. No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.

  6. No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.

  7. No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.

  8. No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.

  9. No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!

  10. No affiliate links: Posting affiliate links is not allowed.

Quick Links

Our Communities

Lemmy App List

Chat and More


founded 2 years ago
MODERATORS
 

A new European initiative dubbed UnifiedAttestation aims to build a free and open-source alternative to Google’s Play Integrity checks. The initiative is backed by smartphone maker Volla, while other partners include /e/OS maker Murena and the team behind iodé OS. The feature will be distributed under an Apache 2.0 license.

all 50 comments
sorted by: hot top controversial new old
[–] dadarobot 61 points 2 days ago (3 children)

this old initiative could help: browsers

[–] issei6969@futurology.today 16 points 2 days ago (1 children)

This older initiative can help: Pay cash for everything

[–] blinfabian@feddit.nl 11 points 2 days ago (1 children)

this older initiative can help: dont pay

[–] rmuk@feddit.uk 7 points 2 days ago

This older still initiative can help: lie down in the forest and become one with the moss.

[–] TMNT_In_My_Septic_Tank@lemmy.org 11 points 2 days ago (1 children)

Right? Why put all these apps with extra trackers on your shit anyway?

[–] marito@lemmy.world 4 points 2 days ago

This is what I used to do until my bank stopped supporting Zelle on the mobile website.

My bank's website runs fine in my web browser, on my graphene phone. I see no problem here.

[–] brokenwing@discuss.tchncs.de 63 points 2 days ago (5 children)
[–] barnaclebutt@lemmy.world 61 points 2 days ago (3 children)

Jeez. They really don't. And, I guess they shouldn't. Their stance is that device certification shouldn't be necessary in the first place which I agree with considering this is not done for computers (don't do this tech bro shitheads).

[–] RobotToaster@mander.xyz 13 points 2 days ago (2 children)

Grapheneos are also against allowing users root access, which is fine on PCs.

[–] psud@aussie.zone 1 points 19 hours ago

Users with low computer skills shouldn't have root on their PCs either

[–] Zak@lemmy.world 11 points 2 days ago (1 children)

Are they, or are they against GrapheneOS itself supporting it?

Those are different. GrapheneOS exists to be security-hardened and usually should choose security over utility where there's a conflict.

[–] lka1988@lemmy.dbzer0.com 2 points 2 days ago

considering this is not done for computers

It is to some degree, with the TPM. Microsoft Surface laptops come to mind.

[–] pseud@lemmy.zip 22 points 2 days ago

Namely,

Having a European version of the Play Integrity which permits people to use insecure products from specific European companies participating in it while disallowing using arbitrary hardware or software is the opposite of a solution. It's more of the same anti-competitive garbage.

Hate to say it but he's probably right.

[–] Ilandar@lemmy.today 16 points 2 days ago (4 children)

At this point it's like an unwritten rule of the internet that every GrapheneOS account comment chain will eventually regress into cooker conspiracy theories about other privacy ROM projects. And I still have no idea why Micay has started lumping iodé in with them, because I have been following that project closely for many years and no one there gives a shit about GrapheneOS. As in, they literally do not talk about Graphene (or any other projects, for that matter). They never compare themselves to GrapheneOS, on security or anything else. It's the most bizarre, one-sided internet war.

Because that dude is nuts. He does a disservice to graphene PR anytime he speaks.

[–] possiblylinux127@lemmy.zip 6 points 2 days ago

The Graphene devs and user base behave like a cult

[–] Zectivi@piefed.social 5 points 2 days ago

As much as I enjoy GrapheneOS, when I hit that part of the chain, I close out. I’m tired of hearing how has attacked GrapheneOS. They used to @ everyone in matrix for it asking for backup, which is why I’m not in their rooms now.

[–] darklamer@feddit.org 2 points 2 days ago (1 children)

And I still have no idea why Micay has started lumping iodé in with them, because I have been following that project closely for many years and no one there gives a shit about GrapheneOS.

I don't know, but it seems to me that you might have a rather good guess as to why right there.

[–] Ilandar@lemmy.today 1 points 2 days ago (1 children)

As in, they literally do not talk about Graphene (or any other projects, for that matter).

???????????????

[–] darklamer@feddit.org 4 points 2 days ago (1 children)

It's quite common for people to feel hurt when they feel ignored.

[–] Ilandar@lemmy.today 2 points 2 days ago

Oh sorry, I think I misunderstood you initially.

[–] LedgeDrop@lemmy.zip 6 points 2 days ago

I'm baffled. It's almost as though they're missing the point of attestation: which is to give "assurance" to application developers/companies that their applications run in "a certain way".

"A certain way" can have many interpretations, but Googles interpretation means:

  1. No root
  2. No custom firmware
  3. When a users "shares their contacts" with your app, your app gets all their contacts - free from being censored or modified.
  4. When a user "shares their files" with your app, your apps gets access to **all their personal data ** - free from being censored, modified or sandboxed.

iodéOS will have their own definition of what "a certain way" is. Which will probably be identical to Google definition.

Heck, GrapheneOS' attestation has it's own definition of a "certain way" applications run:

  1. No root

I know this, because I run Graphene and I run it rooted. I sign my rooted Graphene with keys, that only I carry and I have my phone setup to only allow OS updates with only my keys.

It does not and will not pass Graphene's attestation, although from my perspective - it meets my security requirements while give me control over my data.

This discussion has nothing with security patches, but everything to do with the accuracy and how much information developers and companies can get off our devices.

[–] MonkderVierte@lemmy.zip 5 points 2 days ago* (last edited 2 days ago) (1 children)

Yeah whatever. They are their own bubble.

[–] BestBouclettes@jlai.lu 13 points 2 days ago (2 children)
[–] hitmyspot@aussie.zone 4 points 2 days ago (1 children)

They are if banks don’t allow their apps to be functional on grapheneos.

I have never had an issue with banking apps so long as exploit compatibility mode is enabled for them.

[–] possiblylinux127@lemmy.zip 28 points 2 days ago

Open source DRM is still DRM

[–] xyguy@startrek.website 21 points 2 days ago (2 children)

I appreciate the effort but my banking apps still rely on 2FA through SMS. They aren't interested in implementing a technology that is more secure or even one that is different than what they have already, especially for a fraction of a fraction of a fraction of their user base.

[–] darklamer@feddit.org 6 points 2 days ago (2 children)

I appreciate the effort but my banking apps still rely on 2FA through SMS.

And you trust them with your money!?!

[–] xyguy@startrek.website 2 points 2 days ago (1 children)

Fair point but I am not going to do all my shopping exclusively out of catalogs and mail in my payment with cash.

Its a shitty situation but short of government regulation (ha) nothing is going to change.

[–] Lumisal@lemmy.world 3 points 2 days ago (1 children)

Are there no other banks in your area?...

[–] xyguy@startrek.website 6 points 2 days ago (3 children)

Yes and as far as I can tell, they all have that as their system. Also the changing of the password every quarter which has proven to actually decrease password security and increase password reuse.

I should say, if anyone knows a bank with proper modern online security protocols I am willing to listen.

[–] Lumisal@lemmy.world 2 points 2 days ago
[–] darklamer@feddit.org 1 points 2 days ago

I should say, if anyone knows a bank with proper modern online security protocols I am willing to listen.

I'm personally quite fond of Wise.

[–] Trilogy3452@lemmy.world 1 points 2 days ago (1 children)

All the big banks I use don't do anything ither than SMS, they're lazy AF. This is where regulation should force security in spite of development cost

[–] darklamer@feddit.org 3 points 1 day ago (1 children)

All the big banks I use don’t do anything ither than SMS, they’re lazy AF.

That's truly mind-blowing, and fraud must be rampant! I have accounts in several different banks in several different countries, both inside and outside of the EU, and I have never ever encountered a bank that would rely on SMS "authentication" for security, not even in the distant past when online banking was new.

[–] Xenon@lemdro.id 1 points 20 hours ago* (last edited 16 hours ago)

Most large banks in my country still support 2FA via SMS, and it was a popular authentication method in the past. At least, in recent years, they are switching to Smart OTP, biometric authentication, etc., like with my bank, they switched to Smart OTP in around 2024. The government forced biometric authentication for all large money transfer transactions in 2024–2025.

However, it's too late to stop scammers from scamming victims using the data they get.

I have accounts in several different banks in several different countries [...] and I have never ever encountered a bank that would rely on SMS "authentication" for security.

That's truly mind-blowing to me.

[...] fraud must be rampant!

You are right.

[–] Ulrich@feddit.org 5 points 2 days ago

Seriously, this shit should be illegal already