S.Korea fines Google $177M for blocking Android customisation

Post by jefftk » Tue, Sep 14, 2021, 1:23 PM UTC

Youden wrote: post #20

gjsman-1000 wrote: post #5

Earlier quoted context omitted.

There will still need to be the option for a locked boot loader though. If I’m Snowden, knowing my boot loader could be unlocked and a key logger side loaded isn’t reassuring.

Ironically, Google's own Pixel devices are basically the only ones on the market that allow locking the bootloader with your own key [0]. They even follow the recommended bootflow [1], displaying a warning screen with the hash of the installed ROM when you boot the phone. [0]: https://android.googlesource.com/platform/external/avb/+/mas... [1]: https://android.googlesource.com/platform/external/avb/+/mas...

Post by yoavm » Tue, Sep 14, 2021, 1:33 PM UTC

2Gkashmiri wrote: post #9

gjsman-1000 wrote: post #5

Earlier quoted context omitted.

There will still need to be the option for a locked boot loader though. If I’m Snowden, knowing my boot loader could be unlocked and a key logger side loaded isn’t reassuring.

If such snowden like person wants to use such a device, wouldn't he be able to change to lineage os or whatever knowing full well he is now the master of the device or is there malware that persists still ?

Post by iszomer » Tue, Sep 14, 2021, 1:56 PM UTC

craftinator wrote: post #12

gjsman-1000 wrote: post #5

Earlier quoted context omitted.

There will still need to be the option for a locked boot loader though. If I’m Snowden, knowing my boot loader could be unlocked and a key logger side loaded isn’t reassuring.

No, locked bootloader's are the stuff of nightmares. Much rather be able to scratch all memory on the device and reinstall. Perhaps what I mean is "locked bootloaders at POS". Selling them locked should be illegal, but locking them yourself with your own key should be trivial.

Post by HelixEndeavor » Tue, Sep 14, 2021, 2:05 PM UTC

karteum wrote: post #11

causi wrote: post #3

I hate when a law or legal decision is aimed 45 degrees off like this. Letting manufacturers bundle their fucked-up version of Android is a bad thing. What we need is mandatory unlockable bootloaders so the users can load whatever they want on their devices.

What we need is control on the bootloader, with the ability to unlock, load our own keys, and relock. We also need to clean-up the mess with all those "partitions" (some of them with critical informations e.g. calibration, IMEI, etc) so that only one partition would have all those static information (reasonably protected against overwrite, e.g. colocated with bootloader and device-tree). We should be able to re-parti…

Post by HelixEndeavor » Tue, Sep 14, 2021, 2:09 PM UTC

iszomer wrote: post #25

craftinator wrote: post #12

Earlier quoted context omitted.

No, locked bootloader's are the stuff of nightmares. Much rather be able to scratch all memory on the device and reinstall. Perhaps what I mean is "locked bootloaders at POS". Selling them locked should be illegal, but locking them yourself with your own key should be trivial.

How about splitting the difference like locking the bootloader at point of sale with guaranteed period for updates? After the period has lapsed, allow users to unlock the bootloader to extend with custom software upgrades or, a subscription base to continue with original POS policy. This weirdly intersects for the Right to Repair movement, or for consumers whom would rather be conservative on new device purchases and…