News for hackers. Stuff that matters.

A comment on Google shifting to “upstream first” Linux kernel approach for Android features. Parent comment

Re:Google shifting to “upstream first” Linux kernel approach... by the8472 on Thursday September 23, 2021 @08:44AM (#28628325)
Those kinds of users are unlikely to replace the root of trust, simply due to the process being onerous.

And even if everyone were to install malware. There are other ways to secure banking. E.g. by providing an external token with a display. This is how hardware crypto wallets and some PIN generators for in-browser banking work. Or they could ask the owner to upload the attestation pubkey to their website, then the bank could still check if it's really their app that's running (as confirmed by the boot trust chain). I'm not sure how fingerprint scanners are tied into secure boot, maybe they could be used to verify user intent too.

[ Parent | on HN ]
Re:Google shifting to “upstream first” Linux kernel approach... by wizzwizz4 on Thursday September 23, 2021 @10:22AM (#28629561)
Okay, so the app's running.

Except the app is remote-controlled by a malicious “display driver” that waits for the user to do all this authentication set-up, transfers the money away, “are you sure”s it, then prevents the user from seeing any of the on-phone scam warnings until it's too late to reverse the transaction.

[ Parent | on HN ]
Re:Google shifting to “upstream first” Linux kernel approach... by the8472 on Thursday September 23, 2021 @10:29AM (#28629656)
Display driver is part of the kernel, which is part of the trust chain.
[ Parent | on HN ]
Re:Google shifting to “upstream first” Linux kernel approach... by wizzwizz4 on Thursday September 23, 2021 @04:28PM (#28634854)
Substitute “display driver” for a draw over other apps, “tap this dot” game, then.
[ Parent | on HN ]
Re:Google shifting to “upstream first” Linux kernel approach... by the8472 on Thursday September 23, 2021 @07:17PM (#28636818)
That's a standard feature and not related to unlocking the bootloader. Handling that properly wrt. sensitive apps has to be done anyway.
[ Parent | on HN ]