2 ms·
> That value comes from the firmware and is not writable by Android. But it's returned to the host by adbd that's part of Android. What's stopping someone from
by grishka 3y ago
> That value comes from the firmware and is not writable by Android.
But it's returned to the host by adbd that's part of Android. What's stopping someone from creating a modified adbd that would lie about this value?
- teaearlgraycold 3y agoI don't know that much about the security model. But I think if you really want to verify device integrity you should use an attestation key. That is supposed to be un-spoofable (although bugs can still occur in any software, which would defeat the integrity guarantees).