Angmering1974
On Moderation
If we can have banking apps, we can have GPS-based ticketing apps. Security isn't binary. We wouldn't build anything if we gave up because something isn't foolproof. You just need risk management and for the the levels of fraud to be acceptable.I've implemented Play Integrity and Apple's App Attest. They are better than nothing at increasing the barrier to entry, but they not remotely foolproof. Historically it was Magisk and devices without the ability to do hardware-backed attestation, nowadays there are plenty of compromised OEM keyboxes you can use to get a tampered-with Android device to pass device integrity.
If you think this is a good enough foundation to build an entire country's ticketing system's security on, I've got a bridge to sell you.
There is a ton more risk scoring you can do, too.
I'll buy that bridge off you.
edit: I'm not intending to make an argument for GPS-based ticketing btw. I still want TVMs to accept cash and for the credit-card sized card paper tickets to remain.. !