4 ms·
The elephant in the room, for Google and Microsoft, is verifiable security is worthless if no one actually trusts the organization that released the verified fi
by fidotron 3y ago
The elephant in the room, for Google and Microsoft, is verifiable security is worthless if no one actually trusts the organization that released the verified firmware.
Android should be have been split off from Google a long time ago.
- judge2020 3y agoIf you're using Pixel with stock OS, you trust them anyways - it's about making sure your phone hasn't been tampered with by another party.
- benatkin 3y agoIt doesn't mean that, it just means you selected it out of the available options.
- judge2020 3y agoHow does this relate to verifying that the software running is the same as what google ships to everyone?
- benatkin 3y agoI'm responding to "you trust them anyways" How does using a device mean you trust the vendors? That's wrong. It's like saying you trust your governor because you live in a particular U. S. state.
- judge2020 3y agoIf you don't trust them, why verify the integrity of the software blob they ship with their hardware at all?
- spencerflem 3y agothat was the point of the original comment
- benatkin 3y agoI still want to make sure it's the correct download. And yes I think of the preloaded OS as a sort of download.
- fulafel 3y agoTrust isn't binary, there are several dimensions and varying levels of trust along those.
- deleted 3y ago[deleted]
- pkaye 3y agoAnd who would fund that version of Android?