Google’s experimental Android WebView Media Integrity API could patch the YouTube Vanced loophole once and for all

Google could kill YouTube Vanced for good::The company is exploring an integrity API that could lock down WebViews with DRM

  • takeda@lemmy.worldEnglish
    71·
    1 year ago

    I don’t think it matters. ReVanced patches original YouTube so it will use whatever YouTube is using. Even if current YouTube app doesn’t use WebView that’s nothing stopping them from adding it in the future.

    If I’m reading article right, Google supposedly “discontinued” the attestation technology in Chrome, because of the shit storm, but looks like they are thinking of adding it to Android and use it to verify the devices and applications are genuine. The YouTube server for example might refuse to serve the video if the application is not genuine.

    • muntedcrocodile@lemmy.worldEnglish
      15·
      1 year ago

      If they are testing application genuinity im more concerned they might break all the google services hacks etc used by graphene os.

        • gian @lemmy.grys.itEnglish
          1·
          1 year ago

          I mean they successfully destroyed any possibility to use banking apps in custom roms like LineageOS, with their new Play Integrity

          This is a consequence of the security standards banks (and credit card companies) need to follow, not Google doing.

        • takeda@lemmy.worldEnglish
          12·
          1 year ago

          Talk to your bank and demand them to disable SafetyNet. You own your phone and by doing this they are trying to protect you from yourself.

          My bank app works I think one credit card app displayed warning that my phone is rooted but still let me use it. Your banking app should not block you, but it can warn you if they less feel better.

            • takeda@lemmy.worldEnglish
              1·
              1 year ago

              If you don’t contact them and continue to use the back there is zero motivation for them to change anything.

              I hear this pathetic argument over and over again. It is primarily used in politics. “my senator/representative is republican, he won’t listen” maybe he won’t but the others that already agree with you, don’t require convincing, your congressman does though so that’s why you need to have your opinion heard.

              Unlike with politician, a bank is much easier to change for an individual. You can send email to them, threatening to change and if they refuse, you follow on it (worst case you go to bank that doesn’t do this). You would be surprised how effective this might be when it is connected in any way to their revenue. In most cases the management might not even be aware of the issue and devs simply enabled it because they were told the app needs to be secure, and checking phone integrity sounds like a secure thing to do.

        • muntedcrocodile@lemmy.worldEnglish
          31·
          1 year ago

          It would piss me off hopefully the eu covers that under there antitrust specificly with what they are hopefully going to implement with the new thing they are doing with 3rd party app stores but idk we will see.

          • Kayn@dormi.zoneEnglish
            1·
            1 year ago

            Why would the EU cover how Google controls who uses Google’s services?

          • StrawberryPigtails@lemmy.sdf.orgEnglish
            7·
            1 year ago

            Most people I know who use Graphene still use Google services and backend stuff. Just sand boxed so they have a bit more control.

            Personally, I’m still looking for something that isn’t Google or Apple. Haven’t found it yet.

            • muntedcrocodile@lemmy.worldEnglish
              21·
              1 year ago

              Ive completly killed google excepr for revanced am working on that tho.

              And sandboxed is better than nothing gives more control ill take that over no control any day.