The Play Integrity API was never meant to detect fraudulent apps, but to make it easy for google to become the arbiter of what’s trustworthy and what’s not. They knew this of course, but this lawsuit indicates they might have something solid to stand on. Good luck GrapheneOS!
I feel like a huge aspect that this article and the GrapheneOS developers are overlooking is DRM content.
They’re focusing on user security for a user’s own data, but there’s a whole other side to it with companies wanting to protect their own data - think Netflix and the like who use the same systems to ensure that nobody’s been tampering with the device as a way of bypassing the copy protection of their media.
Now I’m not saying I support DRM at all, I’m very firmly in the camp of being able to own the media you purchase without restriction, but my point is that it’s not as simple as Google being dismissive, lazy or ignorant but rather there’s a lot of commercial sensitivity at play and if Google fucks it up, they could potentially lose certification of the entire android ecosystem.
deleted by creator
Graphene already supports Winevine L1 without Play Integrity. It has nothing to do with DRM, its a seperate system.
could potentially lose certification of the entire android ecosystem
Certification by whom?
The Netflix app is older (2011) than Safetynet (2014?). Google probably didn’t need to provide remote attestation, but making non-Google Android unusable for most people is good for their bottom line.
Netflix being older is hardly relevant to this discussion.
Maybe you’re unaware, but the higher quality streams are only available on devices netflix has certified. You can still use netflix on GrapheneOS but you won’t get that quality, it’ll be downgraded.
This is a common problem for cheaper Chinese devices as well.
