4 ms·

The two reasons are invalid for Pixel phones: 1. Pixel phones display an "unlocked bootloader" warning (which can't be disabled) during boot. In case it is re-

by rfoo 3y ago

The two reasons are invalid for Pixel phones: 1. Pixel phones display an "unlocked bootloader" warning (which can't be disabled) during boot. In case it is re-locked with an additional signing key installed (Pixel-s are literally the only phones which you can do this currently in the market), a similar screen with the SHA256 hash of the public key is displayed. 2. Unlocking does not void warranty. The only reason Google is doing this is they do not want to have two separate SKUs and pay extra cost to configure each phone physically as unlockable or not in the factory.

AaronFriel 3y ago
I don't think the average user would understand what "unlocked bootloader" means, and may even mistake it for a feature or enhancement. It is a supply chain risk. The Android & Pixel teams walk a fine line here: they risk upsetting an important (but small) user group if they change the language and defaults to "THE BOOTLOADER IS UNLOCKED: USE AT YOUR OWN RISK" or even stronger language and shipping these devices to end users.
- rfoo 3y ago
  The unlocked bootloader warning screen isn't very different from what you described [1]. It says: > The bootloader is unlocked and software integrity cannot be guaranteed. Any data stored on the device may be available to attackers. Do not store any sensitive data on the device. Visit this link on another device: g.co/ABH It's already pretty strong language (and very accurate! which is a rare combination). [1] https://www.androidauthority.com/wp-content/uploads/2018/10/Pixel-3-bootloader-unlocked.jpg.webp https://www.androidauthority.com/wp-content/uploads/2018/10/...
  - AaronFriel 3y ago
    Ah, that's much better than the thread had me believe! Kudos to the security folks at Google.
    - flexagoon 3y ago
      That's actually not exclusive to Pixel phones. The custom signing key part probably is, just because no other phone allows you to lock the bootloader with a custom key. But the "bootloader is unlocked" screen is built into AOSP
joecool1029 3y ago
> 1. Pixel phones display an "unlocked bootloader" warning (which can't be disabled) Yet. Other manufacturers have the same warning and have had them disabled. (I did it to one of my older moto phones a few years back) > 2. Unlocking does not void warranty. Not by itself, but having a signal in place that it was unlocked lets the manufacturer look for common problems caused by doing things like flashing the wrong device images to critical partitions (go search around a bit for people corrupting EFS on their phones). Critically Pixel devices do not have a debrick tool that's leaked, at least not for the Qualcomm-based Pixel devices. This means that a brick on any of those partitions means the phone needs a trip back to the depot or a service center that has these tools. Can't be fixed by end-user. Maybe this situation has changed for the Tensor/Samsung pixels but the point is screwing up your device due to flashing incorrect images shouldn't be something the manufacturer needs to foot the bill on.
- yellowapple 3y ago
  > Maybe this situation has changed for the Tensor/Samsung pixels but the point is screwing up your device due to flashing incorrect images shouldn't be something the manufacturer needs to foot the bill on. Then maybe the manufacturers should be more forthcoming with making said tools available to the public, such that they don't have to foot the bill for said mistakes to be corrected.

by rfoo 3y ago

AaronFriel 3y ago

I don't think the average user would understand what "unlocked bootloader" means, and may even mistake it for a feature or enhancement. It is a supply chain risk. The Android & Pixel teams walk a fine line here: they risk upsetting an important (but small) user group if they change the language and defaults to "THE BOOTLOADER IS UNLOCKED: USE AT YOUR OWN RISK" or even stronger language and shipping these devices to end users.

rfoo 3y ago
The unlocked bootloader warning screen isn't very different from what you described [1]. It says: > The bootloader is unlocked and software integrity cannot be guaranteed. Any data stored on the device may be available to attackers. Do not store any sensitive data on the device. Visit this link on another device: g.co/ABH It's already pretty strong language (and very accurate! which is a rare combination). [1] https://www.androidauthority.com/wp-content/uploads/2018/10/Pixel-3-bootloader-unlocked.jpg.webp https://www.androidauthority.com/wp-content/uploads/2018/10/...
- AaronFriel 3y ago
  Ah, that's much better than the thread had me believe! Kudos to the security folks at Google.
  - flexagoon 3y ago
    That's actually not exclusive to Pixel phones. The custom signing key part probably is, just because no other phone allows you to lock the bootloader with a custom key. But the "bootloader is unlocked" screen is built into AOSP

joecool1029 3y ago

> 1. Pixel phones display an "unlocked bootloader" warning (which can't be disabled) Yet. Other manufacturers have the same warning and have had them disabled. (I did it to one of my older moto phones a few years back) > 2. Unlocking does not void warranty. Not by itself, but having a signal in place that it was unlocked lets the manufacturer look for common problems caused by doing things like flashing the wrong device images to critical partitions (go search around a bit for people corrupting EFS on their phones). Critically Pixel devices do not have a debrick tool that's leaked, at least not for the Qualcomm-based Pixel devices. This means that a brick on any of those partitions means the phone needs a trip back to the depot or a service center that has these tools. Can't be fixed by end-user. Maybe this situation has changed for the Tensor/Samsung pixels but the point is screwing up your device due to flashing incorrect images shouldn't be something the manufacturer needs to foot the bill on.

yellowapple 3y ago
> Maybe this situation has changed for the Tensor/Samsung pixels but the point is screwing up your device due to flashing incorrect images shouldn't be something the manufacturer needs to foot the bill on. Then maybe the manufacturers should be more forthcoming with making said tools available to the public, such that they don't have to foot the bill for said mistakes to be corrected.