Comment

Comment by yegortimoshenko

There are not that many phone manufacturers that even allow you to change the trust anchor (which makes any of this even remotely possible). For example, Samsung uses e-fuses to burn in their signing key, rewriting recovery will permanently trip their attestation (Knox); other manufacturers use similar practices. Pixels are one of the only currently available phones with user-controlled trusted boot in mind.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton