Forwarded from Mishaal's Android News Feed
Google has announced that it's hardening Play Integrity API verdicts so they're less spoofable but also faster and more privacy-friendly.
- Improved device integrity verdicts on Android 13+ will require the use of hardware-backed security signals using Android Platform Key Attestation, making them much harder to bypass. Google will adjust verdicts when it detects "security threats across Android SDK versions, such as when there is evidence of excessive activity or key compromise."
- The Play Integrity API will now have the "same level of reliability and support across all Android form factors."
- Because these new verdicts reduce the number of device signals that need to be collected and evaluated, Google says verdict latency can improve by up to 80%.
Developers can opt in to use these new verdicts today or wait until May 2025 which is when all API integrations will automatically transition.
In addition:
- The "meets-strong-integrity" response is being updated to require a security patch level within the last year on devices running Android 13+.
- A new device attributes field lets apps adjust their behavior based on the user's Android SDK version.
- All optional verdict signals are being standardized across apps, games, SDKs, and more.
- Improved device integrity verdicts on Android 13+ will require the use of hardware-backed security signals using Android Platform Key Attestation, making them much harder to bypass. Google will adjust verdicts when it detects "security threats across Android SDK versions, such as when there is evidence of excessive activity or key compromise."
- The Play Integrity API will now have the "same level of reliability and support across all Android form factors."
- Because these new verdicts reduce the number of device signals that need to be collected and evaluated, Google says verdict latency can improve by up to 80%.
Developers can opt in to use these new verdicts today or wait until May 2025 which is when all API integrations will automatically transition.
In addition:
- The "meets-strong-integrity" response is being updated to require a security patch level within the last year on devices running Android 13+.
- A new device attributes field lets apps adjust their behavior based on the user's Android SDK version.
- All optional verdict signals are being standardized across apps, games, SDKs, and more.
今天公司的分支管理真是丰富多彩
前有大哥开发测试的时候，不把自己的需求分支合并到测试分支，再从测试分支打包升级测试环境，而是直接打包了自己的需求分支就升到测试环境，一瞬炸烂了其他还没升级的内容
后有发现release分支里有一堆 into develop 的记录，不知道哪个哥当时开需求分支的时候从develop开出来而不是master/release了，合并到 release 的时候一瞬全带过去。。。然后现在还没要升级的内容就也被送到预升级了
前有大哥开发测试的时候，不把自己的需求分支合并到测试分支，再从测试分支打包升级测试环境，而是直接打包了自己的需求分支就升到测试环境，一瞬炸烂了其他还没升级的内容
后有发现release分支里有一堆 into develop 的记录，不知道哪个哥当时开需求分支的时候从develop开出来而不是master/release了，合并到 release 的时候一瞬全带过去。。。然后现在还没要升级的内容就也被送到预升级了
🤯2