The discussion I stumbled upon, about this SSH app for Android, is really worrying. Will Google really manage to make it impossible to root your phone?
But there’s more to this, it’s more complicated. In the Big Picture, Google has every incentive to make these changes — they lead to more security, and they’re aligned with Google’s corporate goals as well.
- When talking to users, Google will emphasize control over hackers.
- When talking to stockholders, Google will emphasize control over users.
Edit: I disagree with “they lead to more security”. That’s not “security”, let’s not turn words upside-down.
It already is. Fuck SafteyNet. It’s DRM for phones.
SafetyNet isn’t a shit anymore and it could be ez passed on unlocked BL with magisk. Play integrity check is nightmare nowdays specially on stock roms but it also can be passed on some phones/custom roms using lsposed or other magisk modules.
SafetyNet isn’t a shit anymore and it could be ez passed on unlocked BL with magisk
The real challenge has yet to come, from what I’ve understood, once basic attestation eventually gets abandoned over hardware-backed attestation.
Tell me what module will allow me to pass CTS on a stock ROM, I can’t find fuck all - the most I can find is mods to pass basic Attestation, and “disable” CTS - the problem is that SafteyNet, for phones that are known to have a working CTS, will fail if CTS is disabled - to this day I have 2 apps that I can no longer use as they require CTS.
If you can tell me any app, short of a custom ROM that I can use to bypass this behaviour, it will make me incredibly happy.
(google wallet, which Idgaf about, but also this other app that allows me to block companies from checking my credit score)
https://github.com/kdrag0n/safetynet-fix/releases
It should work. Flashed this on more than 10 devices stock/custom and it not working only on shitsung Galaxy a13.
My current setup is lineageos with magisk (magisk delta fork) and microg also installed as module and i pass safetynet without a problem.
edit: fuck g00gle
That has to my understanding been Google’s project all along (making Android crappy that is). IIRC they bought Android, which due to utilizing the Linux kernel was GPL software. The solution was therefore to seperate Android from all the tools that make Android work, splitting core functionality away from the now AOSP and over to Google services. By abuse of market position we are now in the position where stuff like Google push services, safety net and etc are now basically forcing people into their ecosystem. It will not get better, as witnessed with the company’s attempts at making email and most sites on the internet dependant on their ecosystem as well.
Will Google really manage to make it impossible to root your phone?
Google has managed this years ago, but it’s optional. There was a fairly short timeframe when most phone makers enforced it, but now most allow power users to disable the security and root their phones. But usually they will disable some security-sensitive features like Samsung Knox. And many security-sensitive apps like banking apps will not let you run them anymore (if yours does, great for you, but that also means your bank’s security is shit, just FYI).
A banking app allowing itself to run on rooted devices isn’t a security issue.
That’s right. And if there is, the issue is the bank, not your phone. Rule number 1 in security is never trust the client.
Depends on your level of security consciousness. If you’re relying on security identifiers or apis that need an “intact” system, it certainly can be a security issue if you can’t rely of those.
That being said, it’s not exactly a plausible risk for most people or apps.
Thankfully GraphenOS and others are maturing very well and will be a good replacement to googles BS. Hopefully they can keep custom versions alive that will support the apps you want
The linked article — and others — explain that in Android 10+, (a) executable binaries can no longer reside in a read/write directory, and (b) access to /sdcard will go away. Simply put, these changes destroy my application’s ability to function, and that of Termux as well.
That sounds like proper security to me? Inability to access the user’s storage is a bit lame, but they’ve been moving to nicer APIs for that anyway.
Android is a mobile phone OS, not desktop / embedded Linux.
A mobile phone that increasingly has more of your life on it at that. So whereas 12 years ago you might have just lost your contact list and some fart sound boards, today you have bank apps, payment apps, tickets, cards, identification, auto logged in shopping access, and more!
I know more recent versions of android made me curse at google for adding all these guard rails and walls making doing some stuff more difficult.
On the other hand I recently had a phone fall out of my pocket and in the time it took me to get from the corner back to the place I dropped it someone had nabbed it. I was suddenly a lot more appreciative of the restrictions in place that turned my stolen device into a chargeable paper weight.
That sounds like proper security to me?
For casual consumers, I guess. But for power users being able to download, modify, and execute code is core functionality. Shit doesn’t work without it.
No they’re making it more secure to protect mainstream users, who are the bulk of Android users, at the cost of niche apps.
Aren’t there over a hundred OEMs shipping models with their own Android builds? Google will have to convince every single phone manufacturer to lock down their devices the way it wants, which doesn’t seem very easy.
Not when all of them, from a business pov, need to be able to run Google services. As a case study we saw how brutal it was for Huawei to be locked out.
Yes. Everyone can just release a tweaked Android version and Google can’t really stop them.
But if you plan to ship Google services (including the play store, which effectively makes a device an “Android device” in many users eyes) then you will have to be able to pass Googles verification suite.
That’s already the case today and adding new requirements to that in new Android versions happens all the time.
- Sky Cato ( @skycat@beehaw.org ) English11•11 months ago
If android were GPL 3 the users would be protected from “tivoization” aka locked hardware. Too bad Google don’t want that happen
And it also couldn’t be installed on any phone.
If at least Linux kernel were GPLv3 we’ll be safe from OEMs preventing unlocking bootloader.
If whole Android was GPLv3… Too good to even imagine, it’s not going to happen anyway so why even imagine…
A phone will be an appliance, and I’ll just do very basic stuff with it. Real computing will be done at the desktop anyway.
Nah this is changing.
This of course is what they said about tablets. Now people are replacing desktop or laptop workflow with tablets, or alternatively tablets are being designed with removable keyboards so the lines are blurred.
I know scientific researchers who now only travel to conferences with tablets instead of their laptops.
Finally, I predict that we’re moving to cloud computing. It’s the natural way. You VPN into a network and your computing is done on a cluster or on a central computer.
The same is already happening for gaming. People are connecting controllers and glasses like the Xreal Air to phones, then networking into a computer to play a desktop game on their phone.
Not for me it isn’t, smartphones and tablets have always been a horrible user experience (and I’m always bewildered by stories about them replacing desktop/laptops for people), I only have a smartphone out of social pressure, making them even worse is going to drive me away further.
I couldn’t imagine ever replacing a PC with a tablet. Almost none of the software I need is available as an app and what is available just isn’t the same. The lack of processing power is also a big issue. A cheap laptop is much more powerful than an expensive tablet. Also, I don’t want a tablet that is pretty much owned and controlled by Google or Apple.
Running interactive software in the cloud doesn’t work very well if you don’t have a good, low latency fiber internet connection.
This is my take on it as well. My phone is for basic quick communication. My real productivity happens on my laptop and desktop.
While this is the case for me personally, a lot of folks just pull out their cellphones to do the work they need. I feel like we’re the minority with this opinion.
That’s fine, that’s their choice. I get the feeling some here want to impose how things should be for others too.
Commercial maintainers
(Companies like Volla, FXP and Fairphone offer compatible Ubuntu Phones as part of their business. Their reputation rests on preventing any major problems and taking a long view. Some devices can even be bought with Ubuntu Touch already installed!
Does it run android apps?
Not really, no. I used Ubuntu Touch for about a year a few years ago and the method for running Android apps is essentially to run an emulator layer on the phone (anBox), which in practice is nearly unusable. It may have improved somewhat since then but I suspect you’re still going to need a relatively beefy phone at minimum to run whatever solutions there are at a decent speed.
Not natively, but with help of containers. I found two projects and to be honest I don’t know much about them yet, as I still use Android for device warranty reasons. (But I am eager to try as soon as the warranty expires.)
Anbox (discontinued since this year):
- https://ubports.com/de/blog/ubports-blogs-nachrichten-1/post/android-apps-on-ubuntu-touch-with-anbox-3115
- https://github.com/anbox
Waydroid took over and looks promising. https://waydro.id/
Of course you could also run Android emulators, but such container applications like Waydrois are more efficient.