Content deleted Content added
Jakobcornell (talk | contribs) m Improved phrasing and a few other minor fixes |
No edit summary |
||
Line 19:
Critics have also argued that the Play Integrity API undermines competition by effectively requiring developers to rely on Google's proprietary services, strengthening its monopoly over the Android ecosystem and disadvantaging alternative, privacy-focused operating systems.<ref>{{Cite web |last=Stallman |first=Richard |title=Can You Trust Your Computer? |url=https://www.gnu.org/philosophy/can-you-trust.html |access-date=2025-07-07 |website=[[GNU Project]]}}</ref>
Users have also developed tools, such as the ''Play Integrity Fix'' module for [[Magisk (software)|Magisk]]/[[KernelSU]]/APatch, which tricks the attestation using leaked fingerprints of vulnerable devices.<ref>{{Citation |last=Renshaw |first=Chris |title=osm0sis/PlayIntegrityFork |date=2025-07-07 |url=https://github.com/osm0sis/PlayIntegrityFork |access-date=2025-07-07}}</ref><ref>{{Cite tweet |number=1925727131180356008 |user=GrapheneOS |title=Hardware-based attestation can be secure, but the way the Play Integrity API uses it is also highly insecure. It can be bypassed via leaked keys from the most insecure Android devices in the ecosystem. Secure way to use it is pinning, not trusting everything chaining to a root. |first=GrapheneOS |date=2025-05-23 |access-date=2025-07-07}}</ref> Some developers made petitions on sites like [[Change.org]].<ref>{{Cite web |last=TastyDepartureFrom |date=2024-11-21 |title=Stop Google from limiting access to Custom ROMS via Play Integrity. |url=http://www.reddit.com/r/degoogle/comments/1gwed3u/stop_google_from_limiting_access_to_custom_roms/ |access-date=2025-07-07 |website=r/degoogle}}</ref>
Furthermore, some have questioned the effectiveness of the attestation, claiming it does not deliver the level of security promised by Google and instead serves more as a form of [[vendor lock-in]] than a meaningful security measure. Activists have also raised concerns that it may violate antitrust and competition laws, like the [[Digital Markets Act]].
| |||