3 ms·
That value comes from the firmware and is not writable by Android. As for whether the daisy-chain of strcpy() calls are robust, and without a rich history of 0-
by teaearlgraycold 3y ago
That value comes from the firmware and is not writable by Android. As for whether the daisy-chain of strcpy() calls are robust, and without a rich history of 0-days, that is something I don't know.
- grishka 3y ago> That value comes from the firmware and is not writable by Android. But it's returned to the host by adbd that's part of Android. What's stopping someone from creating a modified adbd that would lie about this value?
- teaearlgraycold 3y agoI don't know that much about the security model. But I think if you really want to verify device integrity you should use an attestation key. That is supposed to be un-spoofable (although bugs can still occur in any software, which would defeat the integrity guarantees).