4 ms·
There are a few AVB 2.0 devices that will allow this, including the Pixel series, and the OnePlus 5T, but it can be risky. GrapheneOS works seamlessly with it,
by h4waii 7y ago
There are a few AVB 2.0 devices that will allow this, including the Pixel series, and the OnePlus 5T, but it can be risky. GrapheneOS works seamlessly with it, allowing you to relock the bootloader and only accept signed-OTA updates.
You may be interested in the Magisk [0] project which allows your device to pass Google's "SafetyNet" and present as an unmodified device to apps using that API to detect if they should refuse to run for "security" reasons.
0. https://github.com/topjohnwu/Magisk https://github.com/topjohnwu/Magisk
- zozbot234 7y agoNote that Google SafetyNet is now (as of mid-March 2020) requiring hardware-based remote attestation in order to pass their "CTS" check. This check will fail if the bootloader is not in its default "locked" state, and cannot be feasibly bypassed by Magisk. https://github.com/topjohnwu/magisk_files/blob/master/notes.md https://github.com/topjohnwu/magisk_files/blob/master/notes.... Magisk (and even its 'hide' component) will still be useful for many purposes, but we should not be expecting it to pass all such "safety" checks.