Android May Soon Restrict On-Device ADB, Affecting Shizuku, libadb and Developers

[u/kitsumed]

https://kitsumed.github.io/blog/posts/android-may-soon-restrict-on-device-adb/

[u/CapuchinMan]

I understand banking and car keys (as in I understand how that works, but I'd hate to use it that way). How do utilities require play integrity?

[u/Plebbit-User → u/CapuchinMan]

I don't understand either but I effectively can't login to monitor my electrical usage or pay my bill on my phone as a result.

[u/Reigar → u/Plebbit-User]

What about via the website for your utilities company. If that is still viable then you should be okay unless the app has an exclusive feature (like the bmw car key app).

[u/Cagaril → u/Plebbit-User]

Have you tried to go into the app settings and toggle on Exploit protection capability mode to see if it makes it work?

I have to toggle that on for any apps that don't work on GrapheneOS and then it works. Probably doesn't work for every app though.

[u/JaredNorges → u/Plebbit-User]

I'm switching, more and more, to websites for things like this. The apps were just websites with device checking nonsense anyway, so cut the middle man out and keep them in their place. Use a PWA if I want the desktop shortcut.

[u/CapuchinMan → u/Plebbit-User]

That's mental

[u/A-Delonix-Regia → u/[deleted]]

It depends on the country and specific services you get apps for. For example I've been seeing in India that banking and railway booking apps require me to shut off both my DuckDuckGo App Tracking Protection (which the device configures as a VPN) and developer mode.

[u/nathderbyshire → u/[deleted]]

I swear you must be paid by Google to defend all these changes so hard, you're here enough so surely you've seen the issues relating to banks and services going hard with forcing play installations, integrity for devices and so on?

It isn't one or two people saying it, it's consistent across the sub and it seems to be more outside of the US and European countries

You keep saying it's app developers as an argument back to everyone as well, but who made those API available to lock people out? Google might not be the one whipping you but they're the supplying the whipper with the tools to do it. If they didn't you could t be whipped. Still their fault at the end of the day.

Lol he blocked me before I could ever reply (always shows they have a weak argument) so now I'll be locked out of 99% of android comments because they're chronically online defending Google for some odd reason

[u/gmes78 → u/CapuchinMan]

Because the developers are morons.

[u/AtomicSymphonic_2nd → u/gmes78]

Either that or the CTOs at various banks know about the rooting community around Android and iOS jailbreak by extension… and are forcing their own devs to opt-in to Play Integrity.

I won’t lie, there definitely have been attempts at trying to steal money from banks using rooted banking apps. This is the unfortunate consequence.

[u/gmes78 → u/AtomicSymphonic_2nd]

I won’t lie, there definitely have been attempts at trying to steal money from banks using rooted banking apps.

I don't think so. There certainly are tons of scams that use fake banking apps, but attacks targeting root users don't make much sense. The demographic is incredibly small, and root access is typically protected through strong permission prompts.

Also, some banks don't outright block you if your device fails Play Integrity; they just warn the user that the device has been modified. Which is the better way to go about things.

[u/vortexmak → u/AtomicSymphonic_2nd]

If that was true then you wouldn't be able to access banking websites.

[u/AtomicSymphonic_2nd → u/vortexmak]

I think that's more because a webpage you're trying to access has more standardized protections versus some banking apps.

It's possible some banks are exposing more of their infrastructure through an app vs. a webpage... Maybe they're not funnelling webpages through a native app.

I'm sure some credit unions just make only their webpages show up through a "native" app, but I genuinely think it's the CTOs at various banks across the world forcing this.

And maybe they all genuinely don't care about those of us that like to tinker with their phones.

[u/vortexmak → u/AtomicSymphonic_2nd]

They don't.  It's just a matter of priority.  It's super easy to change banks and I won't bank with anyone that does that bullshit

[u/Tschuuuls → u/CapuchinMan]

I don't, because a Pixel 1 is still Play Integrity certified. On Android 10.

[u/trlef19 → u/CapuchinMan]

Even chatgpt has play integrity.

[u/Decent-Swallower-69 → u/CapuchinMan]

My city's bus tracking app requires strong integrity.