Looks like LOS is finally allowing signature spoofing for microg. More info? (review.lineageos.org)

submitted 8 months ago by Engywuck@lemm.ee to c/lineageos@lemmy.ml

8 comments fedilink hide all child comments

Form that committ, it seems to me that LOS is finally allowing signature spoofing for microg (under certain conditions). Have they finally changed their mind?

you are viewing a single comment's thread
view the rest of the comments

[-] Atemu@lemmy.ml 5 points 8 months ago* (last edited 8 months ago)

Have they finally changed their mind?

Yes. https://review.lineageos.org/c/LineageOS/lineage_wiki/+/383751/2/pages/faq.md

[-] Engywuck@lemm.ee 1 points 8 months ago* (last edited 7 months ago)

Cool, but I wonder why they finally agreed on signature spoofing. IIRC, the were quite adamantine on not allowing it.

[-] Atemu@lemmy.ml 3 points 8 months ago

I don't know but the nature of the patches shifted over time. I believe initially, they allowed any app (or any system app?) to spoof signatures which I'd also agree to not allow. The current patches only allow it for the Google Play services and Play Store which is a much smaller attack surface.

this post was submitted on 26 Feb 2024

25 points (100.0% liked)

Lineage OS

944 readers

2 users here now

Lineage OS

lineageos.org | Wiki

GitHub

IRC | Unofficial Matrix room | Discord

Twitter | Facebook

Other LineageOS communities on Lemmy

founded 3 years ago

MODERATORS

testman@lemmy.ml