←back to thread

A theoretical way to circumvent Android developer verification

(enaix.github.io)
195 points sleirsgoevy | 1 comments | 31 Oct 25 20:20 UTC | HN request time: 0.297s | source
Show context
gruez ◴[31 Oct 25 21:29 UTC] No.45776910[source]▶
Sounds like the UEFI shim loader that's signed by Microsoft but can load an arbitrary EFI executable (with some signing checks). The difference is that the UEFI shim loader is endorsed/condoned by Microsoft. What about Google? This seems easily patchable, ostensibly for "security purposes" (eg. disabling loading dynamic code).
replies(1): >>45777071 #
p_l ◴[31 Oct 25 21:47 UTC] No.45777071[source]▶
Microsoft also forces manufacturers to provide an option to reset Platform Key aka SecureBoot "root of trust" key - which is supposed to be not possible in spec-compliant UEFI system.

They don't do it out of goodness of their hearts, which is why it's more solid than relying on goodwill - Microsoft simply has an offering that depends on that for certain high profile clients.

replies(1): >>45777490 #
XorNot ◴[31 Oct 25 22:39 UTC] No.45777490[source]▶
I suspect it's also a defense against antitrust law suits - lock in was how they got sued for things circa Internet Explorer.

Frankly they should still be getting sued for the way Edge and Cortana are bundled.

replies(1): >>45777657 #
leptons ◴[31 Oct 25 23:00 UTC] No.45777657[source]▶
Then Apple should get sued for bundling Safari, and also for forcing all browser engines on iOS to use Safari - which is way worse than anything Microsoft ever did with IE.
replies(2): >>45777979 #>>45778231 #
torstenvl ◴[31 Oct 25 23:51 UTC] No.45777979[source]▶
Apple does not have a platform monopoly on smartphones the way Microsoft did on PCs.
replies(2): >>45780128 #>>45793080 #
1. leptons ◴[02 Nov 25 20:22 UTC] No.45793080[source]▶
Why do you think Apple blocks all web browsers from using their own browser engines and forces all browsers on iOS to use Safari? And no, the answers do not include "because privacy" or "because power usage".

People should be free to use other browsers and accept higher power usage, or "privacy risk" without Apple forcing their own browser engine, which limits functionality of all web browsers on iOS.

What Microsoft did by bundling IE with windows was far less egregious. Could you imagine if Microsoft forced all browsers on Windows to use IE as a webview? Holly shit people would be rightly pissed.

Apple does this specifically to prevent competition from web applications so that developers have to use Apple's app store, where Apple can charge the developer/customer money. It's spelled out in the DOJ lawsuit against Apple.

https://www.justice.gov/archives/opa/media/1344546/dl?inline