• mrkite@programming.dev
      link
      fedilink
      arrow-up
      31
      arrow-down
      2
      ·
      1 year ago

      Maybe read the article and not look like an idiot. All they did was move the certificates into a signed package that is updated through Google Play. They can revoke certs even faster now because it doesn’t require a system update.

      • ArbiterXero@lemmy.world
        link
        fedilink
        arrow-up
        15
        ·
        1 year ago

        Cool, so I can’t revoke the certs myself? Still bad.

        I can’t add my own for testing? Still bad.

        They manage it via an app that I can’t change at all? Still bad.

      • Wahots@pawb.social
        link
        fedilink
        arrow-up
        6
        ·
        edit-2
        1 year ago

        What if you can’t access gplay for various reasons? (Non-stock OS, geographic lockout, etc etc)

        Are you just straight-up boned when 14 rolls around? Genuinely curious

        • 0x2d@lemmy.ml
          link
          fedilink
          arrow-up
          4
          ·
          1 year ago

          I hope that on LineageOS that you will still be able to manage your own certificates

    • sudotstar@kbin.social
      link
      fedilink
      arrow-up
      11
      ·
      1 year ago

      IMO this isn’t a real “solution” to the problem here, but this article states Android 14 also allows Google to manage device CAs remotely and push updates via Google Play, and goes into detail about how that mechanism is poorly documented publicly and is basically only an option for Google themselves, not any third party device administrators.

      Google can easily claim that all security concerns are handled by their own management while continuing to deny access to all third parties to actually handle that responsibility themselves if desired.

    • mathemachristian[he]@lemm.ee
      link
      fedilink
      arrow-up
      7
      ·
      1 year ago

      I mean thats what its mainly for? To quickly update CAs without needing to do it as a system update that the vendor needs to vet first