4 ms·
It also, no doubt, relies on a Google-signed blob to enforce Secure Boot that is signed by Google. Where do you think that "This device has secure boot disabled
by gjsman-1000 3y ago
It also, no doubt, relies on a Google-signed blob to enforce Secure Boot that is signed by Google. Where do you think that "This device has secure boot disabled" or "This device is running a custom image..." (can't remember exact terminology) warning comes from... So, in theory, Google could make a signed blob that unlocked secure boot if the government really wanted it anyway.
- mindslight 3y ago> in theory, Google could make a signed blob that unlocked secure boot if the government really wanted it anyway Iff the design is secure with regards to storing the secret used to unlock user data, then Google signing a blob to unlock signed boot for a new arbitrary image still wouldn't allow that new image to spill existing user data. (I have no idea if this is actually the case though)
- digging 3y agoGosh I hope that's the case, because this is all too arcane for me.