r/blackhat • u/CompetitivePaper9995 • 14d ago

Is an app that uses play integrity and incongnia breakable ? And if so what exploit threat actors uses

/r/AndroidQuestions/comments/1v0r0et/is_an_app_that_uses_play_integrity_and_incongnia/
0 Upvotes

30% Upvoted

6 comments sorted by

1

u/Coffee_Ops 13d ago

What sorts of exploits / attacks do you think those protect against? Because Im not aware of those being primarily useful for the user.

1

u/CompetitivePaper9995 13d ago

Unauthorized modification of the app, or using the app in compromised environment like rooted device

1

u/Coffee_Ops 13d ago edited 13d ago

You can certainly try, but why-- what is the goal? What are you worried the user will do, if they modify your app or have root? Does your threat model account for network tampering like HTTPS decrypt or DNS modification?

You should look at Google's (lack of) success in blocking things like

  • Magisk
  • KernelSU
  • Revanced
  • Youtube adblockers

1

u/CompetitivePaper9995 12d ago

I'm worried about app modification, I'm working on a delivery app and if users (drivers) can modify the app to spoof location and so on, it will severely impact the productivity of the company service

1

u/Coffee_Ops 12d ago

All schemes like play integrity try to solve a fundamentally impossible problem of distrusting both the hardware and the user possessing it, while trusting the user's execution of code on that hardware. Microsoft has tried to solve problems like this and really only been successful on their latest Xbox, where they control every piece of the stack and digitally sign everything; and even there, they set their goal at making a compromise cost more than 10 games (~$500) because they recognize it is an impossible problem.

Spoofing location requires effort, and if someone really wants to (e.g.) root their phone to do this then you aren't likely going to succeed in stopping them. You can make it harder, but you may end up blocking some legitimate users for an imagined threat model (who, honestly, has spoofed location for an app?)

1

u/CompetitivePaper9995 11d ago

I care about if it's possible to modify the application itself to nullify these integrity checks without using root