Google’s experimental Android WebView Media Integrity API could patch the YouTube Vanced loophole once and for all

Google could kill YouTube Vanced for good::The company is exploring an integrity API that could lock down WebViews with DRM

  • @takeda@lemmy.worldEnglish
    5•1 year ago

    I don’t think it matters. ReVanced patches original YouTube so it will use whatever YouTube is using. Even if current YouTube app doesn’t use WebView that’s nothing stopping them from adding it in the future.

    If I’m reading article right, Google supposedly “discontinued” the attestation technology in Chrome, because of the shit storm, but looks like they are thinking of adding it to Android and use it to verify the devices and applications are genuine. The YouTube server for example might refuse to serve the video if the application is not genuine.

    • @muntedcrocodile@lemmy.worldEnglish
      8•1 year ago

      If they are testing application genuinity im more concerned they might break all the google services hacks etc used by graphene os.

        • gian English
          1•1 year ago

          I mean they successfully destroyed any possibility to use banking apps in custom roms like LineageOS, with their new Play Integrity

          This is a consequence of the security standards banks (and credit card companies) need to follow, not Google doing.

        • @takeda@lemmy.worldEnglish
          0•1 year ago

          Talk to your bank and demand them to disable SafetyNet. You own your phone and by doing this they are trying to protect you from yourself.

          My bank app works I think one credit card app displayed warning that my phone is rooted but still let me use it. Your banking app should not block you, but it can warn you if they less feel better.

            • @takeda@lemmy.worldEnglish
              1•1 year ago

              If you don’t contact them and continue to use the back there is zero motivation for them to change anything.

              I hear this pathetic argument over and over again. It is primarily used in politics. “my senator/representative is republican, he won’t listen” maybe he won’t but the others that already agree with you, don’t require convincing, your congressman does though so that’s why you need to have your opinion heard.

              Unlike with politician, a bank is much easier to change for an individual. You can send email to them, threatening to change and if they refuse, you follow on it (worst case you go to bank that doesn’t do this). You would be surprised how effective this might be when it is connected in any way to their revenue. In most cases the management might not even be aware of the issue and devs simply enabled it because they were told the app needs to be secure, and checking phone integrity sounds like a secure thing to do.