3 ms·
They could also make them merely tamper-evident. There's plenty of ways to allow device owners to unlock their own devices, without also letting others do so. M
by deogeo 7y ago
They could also make them merely tamper-evident. There's plenty of ways to allow device owners to unlock their own devices, without also letting others do so. Manufacturers just aren't interested in that, and are all to happy to lie and claim it's impossible.
- saagarjha 7y ago> There's plenty of ways to allow device owners to unlock their own devices, without also letting others do so. Such as?
- deogeo 7y agoThe mentioned tamper-evident-ness. E.g. the device can display at boot time a warning if any changes were made, or if keys were added to the trusted list. Adding extra keys can easily be locked behind a password that the owner can change. Note that this is not hypothetical - lots of unlockable Android phones will display a warning that they were rooted on boot.
- danShumway 7y agoMy Android phone checks software integrity on boot, but I can override it if I want to install a custom ROM. The setting can only be changed from within the OS, so an attacker or service technician can't do it without my permission. Some[0] Android phones even allow you to re-lock the bootloader afterwards by replacing the chain of trust, so as far as I know there's no technical reason why we couldn't have the best of both worlds. [0]: But not all of them. Don't blindly re-lock your bootloader unless you know for certain that your phone supports it, or you'll risk basically bricking your device.