GrapheneOS Threatens Legal Action Against Google [Android News Byte]

The custom ROM Graphene OS is finding it difficult to work with Google’s approach to device attestation.

~~~~~
Hi! Don't forget to like the video, subscribe to the channel, and hit the "Thanks" button on this video, if you can, and join our channel community here -    / @explainingandroid  


Mentioned Links
~~~~
Ars Report - https://arstechnica.com/gadgets/2024/...


Video Description
~~~~~
Good afternoon, everyone, and welcome to another edition of the Android News Byte.

#android #androidnews #grapheneos

Today, I wanted to highlight some controversy between a privacy and security focused custom ROM, Graphene OS, and Google.
Recently, it was discovered that Authy, a popular 2FA application, was no longer working on devcies that were using the custom ROM.

This was due to an update ot Authy that began using the Google Play Integrity API to see if a device was using modified software.
Meaning, if your phone is rooted. . .if you have a custom ROM installed. . .or even if you just have the bootloader unlocked
Then you are likely not passing Play Integrity checks.

And if you aren't passing Play Integrity checks. . .then some apps may choose to prevent you from using them.

Personally, I have the bootloader of my daily driver unlocked just in case the software bootloops.
This allows me the option to manually flash a fresh copy of the Android firmware to get things back up and running
But since the bootloader is unlocked, I am also failing the Play Integrity checks required to use apps like Authy

You can see how messed up the system is, yet Google claims there are no other options at the moment.
So even if you aren't using a custom ROM. . .or even if you aren't modifying the Android filesystem.
Google has no way of knowing if the OS is official, and they must assume it's bad.

However, things get a bit more spicy as GrapheneOS claims it has "irrefutable proof that the majority of certified Android devices" do not comply with Google's Compatibility Test Suite nor do they comply with its Compatibility Definition Document.

And then goes on to say that the "Play Integrity API is based on lies" due to the claim that Google allows devices from certain OEMs instead of banning them. They claim the system is unfair and that Google could easily work with custom ROM makers who follow the proper security guidelines.

The team says they have tried working with Google to get things up and running again.
Since GrapheneOS does have their own set of signed keys for the hardware they support. It seems like they should be able to get in contact with Google and make sure devices with their software have the correct keys in place.

Google claims these discussions are in place, however, they also state that it's "a lot of work on both sides" and that this will also include lawyers as well. They then end this discussion by saying their team is happy to help the custom ROM community, but higher-level support is tough because "modders are such a tiny, tiny fraction of the user base."

As of right now, GrapheneOS is in talks with regulators around the world. Hoping to get some additional support via laws that will force Google to put in the effort.

It's not like they don't have the funds to put toward something like this.

For now, many of us fear that more apps will begin using the Play Integrity API to prevent certain people from using the application.
I have read the Uber Driver app blocks this as well.
I would actually be curious to see a list of all the applications that are blocking these devices.

If you have noticed an application no longer works on your devcie due to Play Integrity API checks, let me know down in the comments section below.

And please, don't forget to like this video while also subscribing to the channel for more Android news content like this.



Summary
~~~~~~~~~~~~~~~~~
1. Intro [00:00]
2.


As an Amazon associate, I may earn a commission on sales from the links below.

The Gear I Use
~~~~~~~~~~~~~~~~~
5W "Slow" Charger - https://amzn.to/2OaUMV8
Fast Charger - https://amzn.to/3rtBsC6
MicroUSB Cable - https://amzn.to/38dkpeM
USB-C Cable - https://amzn.to/2OqlTvi
TPU Cases - https://amzn.to/38g9b9w
USB-C to 3.5mm Dongle - https://amzn.to/3rVt7c3
USB-C to 3.5mm DAC - https://amzn.to/3CyksSJ
NVIDIA Shield TV - https://bit.ly/3KA17RV
Telescopic Controller - https://amzn.to/3uDrvY9