263
Android 14 blocks all modification of system certificates, even as root (httptoolkit.com)
submitted 2 years ago by to c/programming@programming.dev
55 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 62 points 2 years ago (2 children)

If I don't have the ability to control which CAs I trust, things become useless fast. This is why I fully ditched chomeOS.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 78 points 2 years ago (3 children)

    Google: wants to push their browser based DRM, to which they would inevitably be the ultimate controller of, in the name of "safety".

    Also Google: intentionally kneecaps the existing certificate system which is the main safety system of the web.

    Gee, I wonder if the two are connected.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 35 points 2 years ago (2 children)

    I heard this on the radio yesterday. Secretly ruthless is a good way to describe Google.

    SHAPIRO: OK. So big picture on this anniversary, 25 years in, if you could describe Google's legacy in a sentence, what would that be?

    PATEL: Secretly ruthless.

    SHAPIRO: Oh, that's rough. Wow. Secretly ruthless - that's even less than a sentence. Give me a little bit more. Why do you say secretly ruthless?

    PATEL: Google has convinced everyone that it is this incredibly sincere and earnest company - that it's just a bunch of goofballs making cool things. That is true. But I think if we just paid a little more attention to where Google's money comes from - and it is almost entirely advertising - I think we would be able to see the company and its influence a little bit more clearly. But the truth is, it is an utterly ruthless advertising company that is very, very, very successful at delivering results to its clients.

    SHAPIRO: But Nilay, you didn't mention how cute the Google doodles are.

    PATEL: Yeah, the - I understand. They're very cute.

    https://www.npr.org/2023/09/04/1197548359/the-verges-nilay-patel-talks-googles-legacy-and-its-future-on-its-25th-anniversa

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 8 points 2 years ago (1 child)

    This is very true, although from what I’ve seen both sides are correct. They give very little guidance to any of the stuff they put out, see killing off stadia or how badly they have been messing up chromeOS and just let their engineers do what they want until they lose their way then it falls off. They just don’t care about that because the ad money keeps coming regardless. It seems almost like a result of the fact that google just hires talent so no one else can have it and then they just let them do whatever they want. It’s almost like there are two googles.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 2 years ago

    I freaking love the new updates!!

    I love it when I can't manage my own SSL certificates, even as root

    I love not being to use the fucking McDonalds app on a rooted device

    Web environment integrity is so great! It's incredible that my rooted tablet will be locked out of lots of websites since I'm not using AUTHORIZED chrome on an AUTHORIZED device

    It's so awesome that adblock will stop working in most Chromium-based browsers

    LIKE WTF I JUST GOT A PIXEL NOW YOU NEED TO RUIN IT?

  • permalink
  • fedilink
  • source
  • parent
  • [–] 10 points 2 years ago (2 children)

    Honestly the entire certificate system is a fraud. You can see just how vulnerable it is with the recent Microsoft vulnerability

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    I'm ootl on this one - what happened?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •