News for hackers. Stuff that matters.

A comment on I read the federal government’s Zero-Trust Memo so you don’t have to. Parent comment

Re:I read the federal government’s Zero-Trust Memo so you do... by kelnos on Monday January 31, 2022 @06:43PM (#30156501)
Yeah, that's the crazy thing: that this entire "verification" house of cards can be so easily defeated by just faking the response to an API call from code that you can control (after unlocking your bootloader and installing your own code). I guess this is why there is a push to stop allowing bootloaders to be unlocked.
[ Parent | on HN ]
Re:I read the federal government’s Zero-Trust Memo so you do... by nijave on Wednesday February 02, 2022 @07:39AM (#30176675)
Even locked bootloaders only help a little. Afaik all iOS devices have locked bootloaders but that doesn't stop jailbreaking. I imagine Android, with spotty vendor support track record, would be even easier
[ Parent | on HN ]