A theoretical way to circumvent Android developer verification

Post by thaumasiotes » Fri, Oct 31, 2025, 10:25 PM UTC

asimops wrote: post #3

While it is technically feasible, it is not a good idea to try and find a technical solution to a people/organisation problem. Do not accept the premise of assholes. I hope we can get the EU to fund a truly open Android Fork. Maybe under some organisation similar to NL Labs. --- edit --- Furthermore, the need for a trustworthy binary to be auditable to a certain hash or something would make banning this a simple task…

Post by andrewcchen » Fri, Oct 31, 2025, 10:33 PM UTC

Post by XorNot » Fri, Oct 31, 2025, 10:39 PM UTC

p_l wrote: post #5

gruez wrote: post #2

Sounds like the UEFI shim loader that's signed by Microsoft but can load an arbitrary EFI executable (with some signing checks). The difference is that the UEFI shim loader is endorsed/condoned by Microsoft. What about Google? This seems easily patchable, ostensibly for "security purposes" (eg. disabling loading dynamic code).

Microsoft also forces manufacturers to provide an option to reset Platform Key aka SecureBoot "root of trust" key - which is supposed to be not possible in spec-compliant UEFI system. They don't do it out of goodness of their hearts, which is why it's more solid than relying on goodwill - Microsoft simply has an offering that depends on that for certain high profile clients.

Post by remix2000 » Fri, Oct 31, 2025, 10:41 PM UTC

thaumasiotes wrote: post #11

asimops wrote: post #3

While it is technically feasible, it is not a good idea to try and find a technical solution to a people/organisation problem. Do not accept the premise of assholes. I hope we can get the EU to fund a truly open Android Fork. Maybe under some organisation similar to NL Labs. --- edit --- Furthermore, the need for a trustworthy binary to be auditable to a certain hash or something would make banning this a simple task…

> I hope we can get the EU to fund a truly open Android Fork. How are things in the EU on whether it's legal to buy a SIM card without showing ID?

Post by kube-system » Fri, Oct 31, 2025, 10:52 PM UTC

remix2000 wrote: post #17

thaumasiotes wrote: post #11

Earlier quoted context omitted.

> I hope we can get the EU to fund a truly open Android Fork. How are things in the EU on whether it's legal to buy a SIM card without showing ID?

It is neither illegal nor hard to obtain such a prepaid SIM card.