• SkyNTP@lemmy.ml
    link
    fedilink
    English
    arrow-up
    22
    ·
    1 year ago

    I am not an expert, but it’s likely signed and cryptographically secured. Change a single byte in the be Browser executable and your browser goes on the naughty list. This is total lockdown of the browser, and in principle you can extend certification of both software and hardware all the way down through the OS into the hardware.

      • Anafabula@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        7
        ·
        1 year ago

        If you are on android or ios the phone already cryptografically verifies that the operating system has not been tampered with on a hardware level. Since the operating system is then “trusted” it can verify anything you do on it

        • l0v9ZU5Z@feddit.de
          link
          fedilink
          English
          arrow-up
          7
          ·
          1 year ago

          Doesn’t work. It’s possible to let many banking apps think they are running on a normal device although it is rooted.

          • Koffiato@lemmy.ml
            link
            fedilink
            English
            arrow-up
            6
            ·
            1 year ago

            Yup Play attestation is dead, even the new and shiny “secure” one is bypassed. It’s now just a hinderence.