4 ms·
If you remove the write-protection from the read-only flash on Chromebooks, you can replace the verification keys and re-enable security based on your own root
by mjg59 7y ago
If you remove the write-protection from the read-only flash on Chromebooks, you can replace the verification keys and re-enable security based on your own root of trust.
- AshamedCaptain 7y agoAnd then can you turn the write-protection back on with a physical switch?
- mjg59 7y agoOn modern systems the write-protection is gated via the security chip, which responds to various key combinations. My understanding is that it's possible to re-enable the write protection after flashing and the machine will behave identically (other than that updates from Google will fail to apply due to the system no longer considering Google a trusted authority)