3 ms·

> Root access refers to the highest level of privileges a user can be granted to a computer system. This is no longer true. You might have root access on your

by zb3 2y ago

> Root access refers to the highest level of privileges a user can be granted to a computer system. This is no longer true. You might have root access on your smartphone, but you still don't have access to the TEE (on ARM this is implemented using the "TrustZone" "feature"). Also, AVF is coming to Android, and protected VMs won't work with unlocked bootloader.. so expect the situation to deteriorate further once manufacturers make use of pVMs..

zb3 2y ago
The TEE is where both the device encryption keys (not DRM) and Widevine keys (DRM) are stored..
- TechDebtDevin 2y ago
  So basically a TDM?
  - geraldhh 2y ago
    basically a hardwired authenticator dongle that the user cannot touch
causality0 2y ago
There's not nearly enough awareness of this. Even with root access, on modern Android you have to set up a virtual USB connection just to get at the files in the data folders of android apps if you want to, for example, sync the savegames between your mobile emulators and your desktop emulators. It's fucking disgusting. With every new edition they shave off a little more user agency.
- stavros 2y ago
  What do you mean "a virtual USB connection"? With root access I can see all the files on my Android phone.
  - causality0 2y ago
    A PC can access those folders but even with root and "all files access" android file managers can't on recent versions of Android. Shizuku or apps like it allow file managers to access those folders by pretending to be a PC. Folders like the contents of android/data for each app. Without it you just see empty folders. It's ridiculous.
    - stavros 2y ago
      Hmm really? That sucks, I guess this is after 14 or so? I'm running 12 or 13.
      - causality0 2y ago
        Right. Personally I think Android has gotten worse with every single update since 4.4
- qmr 2y ago
  It's sad how Google has perverted what Android was meant to be.
puppycodes 2y ago
Yeah I mean theres not even any way to really know what your communicating with without taking the thing apart and following the traces + an ocilliscope. If it was worth obfuscating to a determined company it would be hell to figure out. You could just be a sandbox root which is pointed at a guest user in a higher namespace.

by zb3 2y ago

zb3 2y ago

The TEE is where both the device encryption keys (not DRM) and Widevine keys (DRM) are stored..

TechDebtDevin 2y ago
So basically a TDM?
- geraldhh 2y ago
  basically a hardwired authenticator dongle that the user cannot touch

causality0 2y ago

There's not nearly enough awareness of this. Even with root access, on modern Android you have to set up a virtual USB connection just to get at the files in the data folders of android apps if you want to, for example, sync the savegames between your mobile emulators and your desktop emulators. It's fucking disgusting. With every new edition they shave off a little more user agency.

stavros 2y ago
What do you mean "a virtual USB connection"? With root access I can see all the files on my Android phone.
- causality0 2y ago
  A PC can access those folders but even with root and "all files access" android file managers can't on recent versions of Android. Shizuku or apps like it allow file managers to access those folders by pretending to be a PC. Folders like the contents of android/data for each app. Without it you just see empty folders. It's ridiculous.
  - stavros 2y ago
    Hmm really? That sucks, I guess this is after 14 or so? I'm running 12 or 13.
    - causality0 2y ago
      Right. Personally I think Android has gotten worse with every single update since 4.4
qmr 2y ago
It's sad how Google has perverted what Android was meant to be.

puppycodes 2y ago

Yeah I mean theres not even any way to really know what your communicating with without taking the thing apart and following the traces + an ocilliscope. If it was worth obfuscating to a determined company it would be hell to figure out. You could just be a sandbox root which is pointed at a guest user in a higher namespace.