3 ms·
Which Google devices force you to turn this on? (genuine question, I work at Google but not on any hardware product teams)
by mjg59 7y ago
Which Google devices force you to turn this on? (genuine question, I work at Google but not on any hardware product teams)
- AshamedCaptain 7y agoI don't know either, but they will use this sooner or later. And Google specifically: They are not the worst since they tend to address these questions; but they are not the best either since they tend to fall in the "my way or the highway" camp where you can "enable security and let Google control it" or "disable security", lacking the obvious middle option (e.g. the developer switch on chromebooks).
- mjg59 7y agoIf you remove the write-protection from the read-only flash on Chromebooks, you can replace the verification keys and re-enable security based on your own root of trust.
- AshamedCaptain 7y agoAnd then can you turn the write-protection back on with a physical switch?
- mjg59 7y agoOn modern systems the write-protection is gated via the security chip, which responds to various key combinations. My understanding is that it's possible to re-enable the write protection after flashing and the machine will behave identically (other than that updates from Google will fail to apply due to the system no longer considering Google a trusted authority)