<![CDATA[Apple and Google are gradually expanding their use of hardware-based attestation.]]>Apple and Google are gradually expanding their use of hardware-based attestation. They're convincing a growing number of services to adopt it. Google's Play Integrity API and Apple's App Attest API are very similar. Apple brought it to the web via Privacy Pass, which Google intends on doing too.

]]>https://forum.fedi.dk/topic/346e3d4a-0210-4b8b-ba10-82a5a8d3dd45/apple-and-google-are-gradually-expanding-their-use-of-hardware-based-attestation.RSS for NodeThu, 14 May 2026 02:22:34 GMTSun, 10 May 2026 15:06:36 GMT60<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 15:44:07 GMT]]>@GrapheneOS Ejem... There is Altcha. Open source, GDPR compliant, and you can use your backend.

]]>https://forum.fedi.dk/post/https://todon.eu/users/FantasmitaAsex/statuses/116556709705583006https://forum.fedi.dk/post/https://todon.eu/users/FantasmitaAsex/statuses/116556709705583006Mon, 11 May 2026 15:44:07 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 14:34:41 GMT]]>@GrapheneOS We really need to start using containers for running the OS itself instead of flashing the OS. Shameless plug but LosOS (https://gitlab.com/losos-linux) does that.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/115946346685883365/statuses/116556436676046118https://forum.fedi.dk/post/https://mastodon.social/ap/users/115946346685883365/statuses/116556436676046118Mon, 11 May 2026 14:34:41 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 14:02:05 GMT]]>@GrapheneOS I’ve been reflecting on this. For the UK, wondering if we might consider a government petition that explicitly requests that all public (or publicly funded) services can be accessed and used without being forced to use any (especially any foreign) third party service?

]]>https://forum.fedi.dk/post/https://indieweb.social/users/gklyne/statuses/116556308517943917https://forum.fedi.dk/post/https://indieweb.social/users/gklyne/statuses/116556308517943917Mon, 11 May 2026 14:02:05 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 09:33:00 GMT]]>@GrapheneOS @garrett

Hardware Attestation should only be used in situation when device is supposed to not be owned by the user. Like an internal service of a company making sure only company-provided devices are accessing it.

]]>https://forum.fedi.dk/post/https://101010.pl/users/didek/statuses/116555250464554447https://forum.fedi.dk/post/https://101010.pl/users/didek/statuses/116555250464554447Mon, 11 May 2026 09:33:00 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 09:06:48 GMT]]>@GrapheneOS @alwayscurious Anti-trust is dead in the Fourth Reich.]]>https://forum.fedi.dk/post/https://friendica.world/objects/84b6ef2b-106a-019c-28e8-2ad818652050https://forum.fedi.dk/post/https://friendica.world/objects/84b6ef2b-106a-019c-28e8-2ad818652050Mon, 11 May 2026 09:06:48 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 09:01:20 GMT]]>@GrapheneOS Worst case, this is gonna kill desktops altogether, and AluminumOS simply existing is a huge step in that direction.]]>https://forum.fedi.dk/post/https://friendica.world/objects/84b6ef2b-106a-019a-e02b-e48457582074https://forum.fedi.dk/post/https://friendica.world/objects/84b6ef2b-106a-019a-e02b-e48457582074Mon, 11 May 2026 09:01:20 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 03:55:31 GMT]]>@GrapheneOS we need more Linux or BSD FOSS phones. Can that mitigate or at least stop these practices?

]]>https://forum.fedi.dk/post/https://bsd.network/users/jaypatelani/statuses/116553923365145793https://forum.fedi.dk/post/https://bsd.network/users/jaypatelani/statuses/116553923365145793Mon, 11 May 2026 03:55:31 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 03:14:33 GMT]]>@GrapheneOS You're just doing it wrong. Using current mobile hardware and android as base is just wrong approach. Happy to talk about this f2f.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/resiliencetheatre/statuses/116553762309166563https://forum.fedi.dk/post/https://infosec.exchange/users/resiliencetheatre/statuses/116553762309166563Mon, 11 May 2026 03:14:33 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 00:32:11 GMT]]>@GrapheneOS I've used Magisk and Play Integrity Fix/Fork before. While it works, it requires a rooted device. The PIF module has to update very often to keep working, and it would have root privileges to your phone...

]]>https://forum.fedi.dk/post/https://mastodon.social/users/douglas_silva/statuses/116553123856858071https://forum.fedi.dk/post/https://mastodon.social/users/douglas_silva/statuses/116553123856858071Mon, 11 May 2026 00:32:11 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Mon, 11 May 2026 00:30:35 GMT]]>@GrapheneOS The Brazilian government app "gov.br" requires Play Integrity too. There's no fallback, no alternative verification method.

I've sent complaints to the Brazilian entities suggested in the "Keep Android Open" website, but they either reply with a template message or completely ignore it.

Google is pretty much our Evil Corp, but where is fsociety? 👹

]]>https://forum.fedi.dk/post/https://mastodon.social/users/douglas_silva/statuses/116553117577279768https://forum.fedi.dk/post/https://mastodon.social/users/douglas_silva/statuses/116553117577279768Mon, 11 May 2026 00:30:35 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 23:02:49 GMT]]>@hipsterelectron @GrapheneOS @dwaynemonroe The book to throw at people who can't grasp the significance is Edwin Black „IBM and the Holocaust” and for what the target will be in the USA, to which I'll hopefully never be repatriated, witness e.g. Marsha Blackburn declaring that the purpose of KOSA is to „eradicate the transgender.” I figured out that no one was going to deal with the issue in good faith and fled the country before the inauguration, and was already vindicated at the inauguration itself.

]]>https://forum.fedi.dk/post/https://discuss.systems/users/nyc/statuses/116552772479496067https://forum.fedi.dk/post/https://discuss.systems/users/nyc/statuses/116552772479496067Sun, 10 May 2026 23:02:49 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 21:58:12 GMT]]>@ArtHarg wat bedoel je met ‘login in Europa’?

]]>https://forum.fedi.dk/post/https://mastodon.nl/ap/users/116404991435260606/statuses/116552518342722033https://forum.fedi.dk/post/https://mastodon.nl/ap/users/116404991435260606/statuses/116552518342722033Sun, 10 May 2026 21:58:12 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 20:36:10 GMT]]>@GrapheneOS Is this illegal under antitrust or pro-competition laws? If so, is legal action against it planned?

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/alwayscurious/statuses/116552195830971704https://forum.fedi.dk/post/https://infosec.exchange/users/alwayscurious/statuses/116552195830971704Sun, 10 May 2026 20:36:10 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 20:19:12 GMT]]>@GrapheneOS How would this be accessible, eg would blind people be able to scan a QR code on a screen?

]]>https://forum.fedi.dk/post/https://mstdn.social/users/jonpsp/statuses/116552129097088757https://forum.fedi.dk/post/https://mstdn.social/users/jonpsp/statuses/116552129097088757Sun, 10 May 2026 20:19:12 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 20:02:52 GMT]]>@GrapheneOS Het lijkt me dat @kimvsparrentak hier ook wel een mening over zal hebben? Het kan toch niet zo zijn dat login in Europa straks wordt gegatekeeperd door twee Amerikaanse bedrijven?

]]>https://forum.fedi.dk/post/https://mastodon.nl/users/ArtHarg/statuses/116552064887091306https://forum.fedi.dk/post/https://mastodon.nl/users/ArtHarg/statuses/116552064887091306Sun, 10 May 2026 20:02:52 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 19:25:31 GMT]]>@GrapheneOS

It is a proof that governments, banks and companies are one and the same.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/vvanag/statuses/116551917966696818https://forum.fedi.dk/post/https://mastodon.social/users/vvanag/statuses/116551917966696818Sun, 10 May 2026 19:25:31 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 19:22:31 GMT]]>@GrapheneOS This is a major issue. Even to make appointments in DE at local Government Offices one has to jump through ID processes that in my case only work via my wife's iPhone.... it should be constitutionally illegal. It is a denial of right.

]]>https://forum.fedi.dk/post/https://fosstodon.org/users/adingbatponder/statuses/116551906170301624https://forum.fedi.dk/post/https://fosstodon.org/users/adingbatponder/statuses/116551906170301624Sun, 10 May 2026 19:22:31 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 19:22:10 GMT]]>@7cd4a72311bad46117e0f692dddc5f31a543b47ff4265b028f8d820ac808ab3c @MAlBarram This doesn't impact GrapheneOS more than it impacts Windows, desktop Linux, FreeBSD, etc. You should read what we wrote in the thread. Whether you use a FreeBSD device or a GrapheneOS device, needing to have an unmodified iOS or Google Mobile Services Android device to pass checks for accessing banking and government services or now to pass certain reCAPTCHA checks is still going to be an issue.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551904796514930https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551904796514930Sun, 10 May 2026 19:22:10 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 19:20:58 GMT]]>@7cd4a72311bad46117e0f692dddc5f31a543b47ff4265b028f8d820ac808ab3c @MAlBarram Pixels aren't somehow dead and none of what we posted is in any way specific to Pixels, Android devices or operating systems based on the Android Open Source Project.

You should read the thread we posted which is about them bringing the Play Integrity API to the web including for desktops by requiring having a phone certified by it or an iOS device in order to pass checks on the web and desktops too.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551900126539461https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551900126539461Sun, 10 May 2026 19:20:58 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 19:19:50 GMT]]>@GrapheneOS @danieldk

Yes, and money goes both ways.

]]>https://forum.fedi.dk/post/https://masto.ai/ap/users/116286032745568157/statuses/116551895634357184https://forum.fedi.dk/post/https://masto.ai/ap/users/116286032745568157/statuses/116551895634357184Sun, 10 May 2026 19:19:50 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 19:19:01 GMT]]>@Linux @danieldk Motorola Mobility is a subsidiary of Lenovo. Lenovo is a Chinese company.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551892431647834https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551892431647834Sun, 10 May 2026 19:19:01 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 19:10:14 GMT]]>@danieldk

I am the source.

Both Motorola Mobility with Motorola Solutions CAGE Code: 01113, 6H7Z2, 78205, and 7H229 (NCAGE).

https://www.dla.mil/Working-With-DLA/Applications/Details/Article/2920893/cage-code-commercial-and-government-entity-code/

If you’re looking for an actual document that says, “Yes, we’re trying to screw over the American people,” a written confession in a convenient PDF file, you won’t find one. Ever.

@GrapheneOS

]]>https://forum.fedi.dk/post/https://masto.ai/ap/users/116286032745568157/statuses/116551857887351170https://forum.fedi.dk/post/https://masto.ai/ap/users/116286032745568157/statuses/116551857887351170Sun, 10 May 2026 19:10:14 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 18:59:10 GMT]]>@GrapheneOS It is not. Nothing is about security, everything is about device lockdown so surveillance becomes unescapable. This is the ultimate goal of the system. It is quite evident on all fronts. Mobile, desktop, consumer electronics, vehicles etc. Only servers seem to get a lighter treatment because they are used by corporations.

]]>https://forum.fedi.dk/post/https://ieji.de/ap/users/116536959211229473/statuses/116551814369469155https://forum.fedi.dk/post/https://ieji.de/ap/users/116536959211229473/statuses/116551814369469155Sun, 10 May 2026 18:59:10 GMT<![CDATA[Reply to Apple and Google are gradually expanding their use of hardware-based attestation. on Sun, 10 May 2026 18:58:48 GMT]]>@Linux Motorola Mobility is a subsidiary of Lenovo and definitely doesn't have the relationship you're describing with the US government. Motorola was split up in 2011 and Motorola Mobility was acquired by Lneovo in 2014. You're confusing entirely different companies together, not that it would make sense regardless since GrapheneOS is open source. They don't need to do anything special to see what we're doing.

]]>https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551812950151596https://forum.fedi.dk/post/https://grapheneos.social/users/GrapheneOS/statuses/116551812950151596Sun, 10 May 2026 18:58:48 GMT