Live data from Hacker News

S.Korea fines Google $177M for blocking Android customisation

reuters.com

31–40 of 99 posts

Re: S.Korea fines Google $177M for blocking Android customisation

#31
post #2

I recently installed LineageOS on my phone, replacing the stock MIUI. I would probably return this phone if I had no other option than to use MIUI. I much prefer the "pure" Android experience. For many essential and security critical apps to work, like bank apps or the McDonald's app you need to hide the fact you're using a modified system, because of SafetyNet. This hiding/bypass works for now, because it tricks Goo…

>or the McDonald's app Excuse me? McDonald's app considers itself security critical now?

[deleted]

Re: S.Korea fines Google $177M for blocking Android customisation

#32
post #2

I recently installed LineageOS on my phone, replacing the stock MIUI. I would probably return this phone if I had no other option than to use MIUI. I much prefer the "pure" Android experience. For many essential and security critical apps to work, like bank apps or the McDonald's app you need to hide the fact you're using a modified system, because of SafetyNet. This hiding/bypass works for now, because it tricks Goo…

>or the McDonald's app Excuse me? McDonald's app considers itself security critical now?

I mean, you put your credit card into it, so yeah?

Re: S.Korea fines Google $177M for blocking Android customisation

#33
post #3

I hate when a law or legal decision is aimed 45 degrees off like this. Letting manufacturers bundle their fucked-up version of Android is a bad thing. What we need is mandatory unlockable bootloaders so the users can load whatever they want on their devices.

There will still need to be the option for a locked boot loader though. If I’m Snowden, knowing my boot loader could be unlocked and a key logger side loaded isn’t reassuring.

In all fairness, a locked bootloader won't help against exploits in the OS: https://news.ycombinator.com/item?id=28516095

If I'm Snowden, I would be far more concerned about that.

Re: S.Korea fines Google $177M for blocking Android customisation

#34

Earlier quoted context omitted.

> unlockable bootloaders so the users can load whatever they want Here you go: https://puri.sm/products/librem-5 .

We shouldn't have to sacrifice performance, quality, and reasonable price points in order to have the basic things we've had in the desktop world for decades.

[deleted]

Re: S.Korea fines Google $177M for blocking Android customisation

#35
post #11
post #3

I hate when a law or legal decision is aimed 45 degrees off like this. Letting manufacturers bundle their fucked-up version of Android is a bad thing. What we need is mandatory unlockable bootloaders so the users can load whatever they want on their devices.

What we need is control on the bootloader, with the ability to unlock, load our own keys, and relock. We also need to clean-up the mess with all those "partitions" (some of them with critical informations e.g. calibration, IMEI, etc) so that only one partition would have all those static information (reasonably protected against overwrite, e.g. colocated with bootloader and device-tree). We should be able to re-parti…

Librem 5 has its modem on a detachable M.2 card, sounds like what you describe.

Re: S.Korea fines Google $177M for blocking Android customisation

#36
post #11
post #3

I hate when a law or legal decision is aimed 45 degrees off like this. Letting manufacturers bundle their fucked-up version of Android is a bad thing. What we need is mandatory unlockable bootloaders so the users can load whatever they want on their devices.

What we need is control on the bootloader, with the ability to unlock, load our own keys, and relock. We also need to clean-up the mess with all those "partitions" (some of them with critical informations e.g. calibration, IMEI, etc) so that only one partition would have all those static information (reasonably protected against overwrite, e.g. colocated with bootloader and device-tree). We should be able to re-parti…

Google phones allow re-locking the bootloader with your own key, except it still results in a warning during boot, and there's no way you're passing SafetyNet with this, at least not without hacks like Magisk. Also even when you unlock the bootloader, the TrustZone OS, which runs with hypervisor permissions and manages all the exciting things like DRM and SafetyNet itself, is still off limits for you.

Re: S.Korea fines Google $177M for blocking Android customisation

#37
post #3

I hate when a law or legal decision is aimed 45 degrees off like this. Letting manufacturers bundle their fucked-up version of Android is a bad thing. What we need is mandatory unlockable bootloaders so the users can load whatever they want on their devices.

> unlockable bootloaders so the users can load whatever they want Here you go: https://puri.sm/products/librem-5 .

Give me a Librem 5 with an SoC that isn't hot garbage and I'd buy it immediately.

Re: S.Korea fines Google $177M for blocking Android customisation

#38
post #22
post #8

Earlier quoted context omitted.

I'm not aware of any manufacturer who allows bootloader unlocking without also displaying a warning screen every time the phone boots up. Example: https://www.thecustomdroid.com/wp-content/uploads/2019/06/Ho...

My current phone (Xiaomi POCO F2 Pro) only displays a faint lock/unlock icon above the logo while booting. Easy to miss. But that's not really important, because unlocking the bootloader factory resets the device on every Android phone that I know of. AFAIK it's not possible to unlock a bootloader without the owner's knowledge.

Even if it's easy to miss, a person like Snowden would be looking out for it.

Re: S.Korea fines Google $177M for blocking Android customisation

#39

Earlier quoted context omitted.

>or the McDonald's app Excuse me? McDonald's app considers itself security critical now?

I mean, you put your credit card into it, so yeah?

You also put your credit card into your web browser, and it can even store your cards (without the cvc) to autofill them for you.

Re: S.Korea fines Google $177M for blocking Android customisation

#40
post #10
post #2

I recently installed LineageOS on my phone, replacing the stock MIUI. I would probably return this phone if I had no other option than to use MIUI. I much prefer the "pure" Android experience. For many essential and security critical apps to work, like bank apps or the McDonald's app you need to hide the fact you're using a modified system, because of SafetyNet. This hiding/bypass works for now, because it tricks Goo…

Sure, but your LineageOS only works because Google is forcing manufacturers to pass CTS tests (which ensure that all Android devices are actually compatible with your apps). If that disappears, you'll end up with apps that only work on Samsung Androids and your LineageOS will stop being compatible. We're essentially going back to horrorshow of SymbianOS, where different Symbian devices weren't compatible between them…

I remember how people were complaining loudly about my app crashing on Meizu phones. Those never passed the CTS, but that didn't stop the manufacturer from preinstalling play services on them. So we had to buy one and I had to decompile the system framework to find a way to work around their shitty modifications to standard UI components to prevent the app from crashing. Fun stuff.
Post reply on HN