Technology

60113 readers

2452 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

142

Google’s “Web Integrity” Android API could kill “alternative” media clients (arstechnica.com)

submitted 1 year ago by AnActOfCreation to c/[email protected]

18 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 14 points 1 year ago* (last edited 1 year ago) (1 children)

If you are Spotify or YouTube, you could already block modified devices at the app level before the embedded WebView even boots up, via the Play Integrity API.

That's a pretty serious misconception. Regardless of whatever they do with the Play Integrity API, YouTube cannot currently stop me from installing ReVanced or some other app from F-Droid on my LineageOS phone. The idea of this new API is to prevent anything not Google-approved from playing Youtube videos, in a cryptographically secure way.

Nothing that isn't Chrome will be allowed to use Youtube without implementing this API, nothing that isn't Google-approved will be allowed to do so, and if it doesn't make it into Chrome that just means they have other plans for dealing with the problem in Chrome.

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago)

... and come to think of it, if this does make it into Chrome (and why wouldn't it, really? WebView is just another brand name for Android Chrome) it's going to be difficult to stop any random website using it to refuse service for things that have nothing to do with the intended use case of preventing "media playback" simply by adding some otherwise irrelevant embedded media to any web page and refusing to operate if it doesn't load. Any site that wants to will be able to verify that you don't have unauthorized browser extensions, just like the original "Web Environment Integrity."

They have simply taken "Web Environment Integrity", changed its name to "Webview Media Integrity", and launched a massive press campaign to fool half the world into thinking it's not exactly the same damn thing.