Notices by Tim Perry (pimterry@toot.cafe)

https://blog.postman.com/download-mobile-game-postman-api-first-journey/

*Blinking*

I... I really don't know what to make of this! They might as well just buy a billboard with "we have too much VC money and we're really not sure what to spend it on" 😂

@kuba They can be distributed via Google Play, but it's also possible to install them manually, if you can successfully build & sign one that the OS will accept.

I just checked and the official Android 12 AOSP emulator does use APEX already for other modules, so I think it is indeed very likely that for Android 14 this certificate change will apply to AOSP too.

@kuba as far as I know, yes, although it's hard to know anything 100% for sure until the official release.

Turns out that Web Environment Integrity proposal everybody is getting angry about (imo very legitimately) was effectively already shipped by Apple in Safari last year: https://httptoolkit.com/blog/apple-private-access-tokens-attestation/

That means if Chromium ships it too, we could quickly move to 90%+ of browser traffic being attested. Not good!