3 ms·
Currently you can use Magisk to get around this, which roots without changing the filesystem. But Google is moving towards reading hardware fuses, and has been
by kuschku 9y ago
Currently you can use Magisk to get around this, which roots without changing the filesystem.
But Google is moving towards reading hardware fuses, and has been working together with OEMs to use secure enclaves to securely attest the status of the system in the future.
By requiring the attestation results to be signed by a key burnt into the CPU, they also prevent virtualisation.
- amckinlay 9y agoAnd yet having a hardware enclave is necessary to secure private keys for device encryption and user privacy. I'm not against, non-network, hardware-based security features. In fact, I think we need them. I would certainly desire a phone where someone can't simply access my private key with a soldering iron and flash programmer. And I wouldn't mind a bootloader that is locked to prevent tampering with the device, as long as I can unlock it, and unlocking it wipes the device or something. I wouldn't mind using Android as intended without root access. But, I want control over the decision. I want to control the OS I run on my device. I want the freedom to increase its lifespan beyond whenever the manufacturer stops provided security updates. I want to have the ability to enable root to inspect my data on my device using my storage, without sacrificing my ability to watch movies on the $600 device I paid for that somehow has a better quality display than my monitor. And also, I want the ability to block ads that gulp down my expensive mobile data so that I can instead pay for a service like Netflix.
- kuschku 9y agoAnd I want the ability to lock the bootloader again, but with my own keys.