I was thinking that maybe such idea could be applied on a Linux phone that could run all your banking apps without Waydroid’s “you-must-be-a-hacker” issues, literally by having a half-asleep Android running on another chip, which you can wake up whenever to do your “non-hacker” things, while at the same time you can run the rest of your system (calls, messaging, calculator, calendar, browser…) on your lightweight, private and personalized Linux mobile OS.
I think I would pay big bucks for something like this, and it could serve as a transition device for ditching Android in the future when Tux finally governs over the world.
What do you guys think?
That already exists with waydroid. It’s what people use on the Librem 5 and PinePhone to run linux apps. It would save much more battery if it were at OS level, but I assume that would be akin to merging Android and mobile linux distros and a lot more work.
Why do you have the impression that waydroid has a “you must be a hacker” issue?
Anti Commercial-AI license
Does waydroid support safetynet? That seems to be what op is talking about
SafetyNet is deprecated and replaced by “Google Play Certification” checks. This means any custom OS may be blocked. Its pretty horrible.
If a phone vendor were to support it out of the box with all the additional security software (the stuff most custom ROMs lack), then I don’t see why not.
If you’re flashing Linux onto your phone and want to use apps that check Google APIs, then no.
Safetynet worked at some point, but it’s proprietary tech that changes on a whim. Any other emulator or container will probably run into the same problem. Starting an entire new emulator with the purpose of circumventing safetynet or other proprietary attestation is an effort that could’ve gone into making it work on waydroid instead.
@unknowing8343@discuss.tchncs.de
Anti Commercial-AI license
That’s specifically for Magisk.
This is for Waydroid.
My understanding is the Google Integrity API is not the same as Google Play Protect:
Google Play Protect seems to function more like an antivirus
Because Play Protect works doesn’t mean Integrity API will.
Anti Commercial-AI license
You need Google Play Certification to pass Play Integrity checks.
Magisk breaks other checks.
For Waydroid this is the only step you should need, unless you add Magisk.
Where did you get that second screenshot from? It’s not available on my Waydroid instance.
Anti Commercial-AI license
Oh, it does work 😮 That should solve OP’s problem then 🤔
Anti Commercial-AI license
I doubt it does, google would never approve that. Maybe if it would pretend to be an other, genuine device, but I’m not sure the devs want to deal with that
AFAIK waydroid doesn’t pass the AVB (Android Verified Boot) check
It passes the basic one?
https://docs.waydro.id/faq/google-play-certification
Damn, interesting. Only works with Google Tracking at root level, but at least it works… for now.
If I am not mistaken, not all apps run on Waydroid, specially banking stuff will freak out because they have systems to know that you are running on true, verified hardware or not.
I’m afraid banking apps cannot be solved. They already require you to install sketchy system mods if you have just rooted your genuine phone with the original OS
I mean, with this dualOS device it would be solved… And recognition of Linux mobile would increase, hopefully making banking apps look for other systems of “verification”.
No, not that easily. Your phone could have 2 flash storages and do all the android stuff in there, with hardware TPM, A/B root, verified boot, rollback prevention, not rooted etc.
Ironically this is not even enforced by those shitty banking apps, GrapheneOS is way more secure and will probably be blocked by some apps soon, as they are not a “google certified OS”, replacing the old SafetyNet.
I see now, you’re partly right. But I don’t think such a device would be “approved by google”, the party who decides which device configurations are “trusted”
https://wiki.archlinux.org/title/Waydroid#ARM_Apps_Incompatible
https://docs.waydro.id/faq/community-projects-we-like
@onlinepersona did you change your license? List time I saw, it was CC by SA or something
Text links to the same license. Just using a different text to make it a little bit clearer what it’s for. (Still raises many questions)
Anti Commercial-AI license
Ah, I see