Post #3429305
2026-06-24 18:49 UTC
@zm@kolektiva.social No, there's no feasible way to do that. They're mostly using the Play Integrity API to ban using anything not certified by Google. It's highly resistant to bypassing the checks at scale and uses hardware-based attestation when available. Strong integrity level fully requires hardware-based attestation which can't be spoofed but rather would require leaked keys which can be revoked after detecting it via fingerprinting. The currently more common device integrity level partially requires it.
Replies (1)
-
@GrapheneOS@grapheneos.social 2026-06-24 18:51
@zm@kolektiva.social We do regularly work around apps incompatible with our privacy and security protections or very rare cases where apps have specifically banned GrapheneOS. We can't realistically do anything about the Play Integrity API device and strong integrity levels from technical angle. It would be very fragile and would keep breaking even if they didn't directly stop us doing it, but they would since they directly detect and counter spoofing that's being done at scale.