Post #1872680

Remember the Linux VM thing that Android dev tools now have? The tech behind it is the peak of using remote attestation to prevent you from controlling or inspecting what runs on your device. And another feature that apps will use to refuse to work on rooted devices. You can only run kernel images signed by Google or an approved OEM with the virtualization API (enforced at the guest firmware level which is signed and verified by the host OS). Google lists a use case as running a malware classifier on your device while preventing you from reverse engineering the algorithm. They list other vendors use cases as running some vague client risk assessment models. Remember the proposed laws about enforcing client side scanning of all sent messages? This is the perfect plumbing for that. We are losing the war on generalized computing. source.android.com/docs/core/virtualization/architecture source.android.com/docs/core/virtualization/usecases