• 0 Posts
  • 20 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle






  • Many devices, including Google’s own Pixel devices have user-unlockable bootloaders. No security vulnerabilities are involved in the process of gaining root access or installing a third-party Android distribution on those devices.

    What’s going on here isn’t patching a vulnerability, but tightening remote attestation, a means by which a device can prove to a third party app that it is not modified. They’re selling it as “integrity” or proof that a device is “genuine”, but I see it as an invasion of user privacy.

    Google can’t exactly make root access and custom ROMs easier to use in 2025.

    Sure they can. They’re in a much stronger position to dictate terms to app developers than they were in 2010 when it was not yet clear there would be an Android/iOS duopoly.

    They don’t want to though, because their remote attestation scheme means they can force OEMs to only bundle Google-approved Android builds that steer people to use Google services that make money for Google, and charge those OEMs licensing fees. A phone that doesn’t pass attestation isn’t commercially viable because enough important apps (often banking apps) use it.








  • I encountered an infuriating example of the opposite a couple years ago: a gas stove that wouldn’t work without electricity.

    A gas stove normally operates with a mechanical valve to control gas to each burner, and while modern ones have electronic igniters, it’s possible to use a match or the like instead. These assholes went out of their way to add an electronic valve that shuts it off when there’s no power. It’s probably in the name of safety, but the scenario where someone leaves the valve open without igniting the gas is possible even with power by failing to engage the igniter correctly, and gas is smelly.

    I should be able to use a gas stove when there’s no electricity or the igniter is broken if I supply my own source of ignition.


    For your example of a flashlight, consider one with USB charging. If the charging port or circuit fails, I should be able to easily take out the battery and charge it in another charger (Li-ion charging is pretty standardized). If the battery is dead but the USB port works, I should be able to use it as a USB-powered lamp.