points by brnt 1 day ago | 0 comments
To whom it may concern:
There is an alternative to Google's proprietary and unprivate integrity API that every bank now uses (and is at the root cause of this issue):
Spread the word.
There is an alternative to Google's proprietary and unprivate integrity API that every bank now uses (and is at the root cause of this issue):
Spread the word.
If Unified Attestation would become a standard, they would use it to entrench themselves over GrapheneOS et al.
AOSP has an API for remote attestation attestation. Banks should just come up with a list of signing keys to be trusted. Heck, they can start here:
https://grapheneos.org/attestation.json