I really wish we had something already made for using Android Virtualization Framework for running proprietary apps, instead of using half broken Work Profile managers
I should try doing smth like that The app runs inside the VM, and gets proxied to the main OS, with select stuff being made available, again proxied. This will be a lot of work requiring deep knowledge of Android, but will make AVF actually useful - it could even be used to run various Google malware and get eg. NFC payments working, maybe?
@illyBytes no clue tbh Depends on which stage in the boot process the key comes from, but I would presume it doesn't come from the Android bootloader but rather smth like the Trust Zone, otherwise it'd be trivially spoofable
@ity i still dont know how the gplay even verifies if the key is correct tbf, devices with literally ZERO secure element can pass it but graphene os's boot keys are banned by gplay protect
@illyBytes I probably should look at it at some point... I thought that they hard require a TPM or similar & hardware attestation, and any device without that just becomes impossible to pass it on
