Beyond Google: HarmonyOS, HyperOS, and Securing the Non-GMS Mobile World

Episode Description:
Join us as we dive into the evolving landscape of mobile operating systems beyond the familiar Google Mobile Services (GMS) ecosystem. We explore how Huawei has achieved significant market success with its HarmonyOS, particularly in China, despite the challenges of being added to the U.S. entity list and losing access to GMS. The sources highlight HarmonyOS NEXT, Huawei's self-developed OS that fully decouples from Android, featuring a China-made kernel and aiming for a large native app ecosystem.This shift highlights the rise of non-GMS mobile devices, driven by privacy concerns and a desire for openness or regional market dynamics. However, non-GMS apps face unique security challenges due to the lack of Google's built-in security services, potentially increasing risks of malware and unauthorized access.Adding to this dynamic, rumours suggest Xiaomi may collaborate with Huawei and BBK to create a Google-free version of its HyperOS, aiming for increased software independence and control. Such a move could redefine the global Android ecosystem and introduce both opportunities and complexities for developers and users.In this environment, App Attestation is crucial for verifying the integrity and authenticity of apps and devices. While Google PlayIntegrity and SafetyNet serve GMS apps, Approov emerges as a game-changer, offering a comprehensive app attestation and runtime security solution for non-GMS (and other) devices, independent of Google services. We discuss how Approov helps enhance security, protect APIs, and empower developers in this diverse mobile world.

Discussion Points:

• Huawei's success with HarmonyOS following GMS restrictions.
• The features and goals of HarmonyOS NEXT as a distinct operating system.
• The characteristics and security challenges of non-GMS mobile devices.
• Xiaomi's rumoured plans to potentially launch a Google-free HyperOS, possibly in alliance with Huawei and BBK.
• The importance of App Attestation in safeguarding mobile apps and APIs.
• Approov as a security solution for non-GMS apps, offering benefits like real-time threat detection, independence from GMS, and comprehensive protection.
• Comparing Approov to traditional methods like Google PlayIntegrity.
• The strategic implications of open vs. closed mobile ecosystems and their impact on security and innovation.

Relevant Links:

• This episode draws on information from various sources discussing non-GMS devices, Huawei's HarmonyOS, Xiaomi's HyperOS rumours, and mobile security solutions like Approov.
• Learn more about enhancing mobile app security: approov.io

Keywords: Non-GMS, Google Mobile Services, GMS, HarmonyOS, HarmonyOS NEXT, Huawei, Xiaomi, HyperOS, App Attestation, Mobile Security, Android Security, Non-GMS Security, Approov, Open Ecosystems, Mobile App Security, API Security, Runtime Protection, Device Attestation, Cybersecurity, Non-GMS Apps