mastodon 4.8.0-alpha.3+glitch
Good to see a POC that shows how useless security-wise is the Play Integrity:
Android LPE using DRAM bitflip => https://bsky.app/profile/retr0.id/post/3mljtyauw322d
A requirement to get any security protection with the Play Integrity is that attackers can't bypass it on any device.
As soon as an attacker can bypass it, it is possible to distribute app clones (fake banking app) that proxy-pass the Integrity requests to a controlled device, defeating the Play Integrity.
On the other side, how many users are locked-out of critical services because of the Play Integrity? For legit users, any non-trivial workaround is a blocker.
Play Integrity is not about security, but about coercition, Google's tool to impose their conditions: eg. forcing OEM to preinstall their apps, some with privileges (Chrome, Youtube, Play Services, etc)
Nextcloud talk just merged UnifiedPush support! It will be available with Nextcloud 34
Start Alliances, Not Wars
> For our community to thrive and slowly build a movement, we need more alliances, not wars.
Really good article from @Em0nM4stodon@infosec.exchange, thanks !
https://www.privacyguides.org/en/activism/toolbox/tip-start-alliances-not-wars/
Has #docker changed their pull limit? I don't see how I could reach the 100/6h so rapidly 🤔
@nightdice@unfug.social Yes definitely available on non-rooted devices: you need to enable developers settings (that you'll be able to disable later).
ADB is usually available on most distrib with android-tools package. Then you need to run adb logcat --pid $(adb shell pidof org.unifiedpush.distributor.sunup)
If you struggle getting these logs, let me know. It it helps there is a matrix room for UnifiedPush