Gregory's Serverthese takes might be spicy, but whatever.
stereo griever
11 comments
leo vriscrab² (homestuck) :dado_verified:
@selfisekai universal safetynet fix passes MEETS_STRONG_INTEGRITY on the Pixel 7 series
stereo griever
@leo hm, what's the result without the fix module? did you just flash Magisk on stock or install some custom ROM? did you have to re-lock your bootloader?
leo vriscrab² (homestuck) :dado_verified:
@selfisekai dont remember, magisk on lineageos, unlocked bootloader
2xsaiko 🐀
@selfisekai@social.hackerspace.pl I don’t think this is a spicy take at all. As you said, “never trust the client” is kinda a very basic security principle. And usually when you see it used regardless, it’s usually in the context of stupid anti-consumer features like this…
MildDrop72 :verialt: :verialt:
@selfisekai FYI the links look identical to the normal text so it’s very difficult to discover them, especially on mobile |
@selfisekai i have contacted the developers of Kiwi Browser for Android, which is a fork of Chromium that allows extensions. they said, basically, "Fuck it, we're fooling the Web Environment Integrity."
you don't even need root to inject into processes.