News for hackers. Stuff that matters.

A comment on Android 12 forces you to choose a default browser unless you disable Chrome. Parent comment

Re:Android 12 forces you to choose a default browser unless ... by stragies on Tuesday March 15, 2022 @11:10AM (#30686290)
Are there actually (current, available, lineage-supported(1)) COTS phones, where you can add your own signing keys, and then re-lock the boot-loader? With mainline/non_ancient Linux kernel?

Because without that, aren't all (modded to unlocked_boot-loader) Android devices susceptible to an Evil-Maid attack? Even if the device/user uses FDE, the evil maid could just spoof the key-entry frontend, no?

(1) or whatever other ALT-Android/Linux FW.

[ Parent | on HN ]
Re:Android 12 forces you to choose a default browser unless ... by jdiez17 on Tuesday March 15, 2022 @11:33AM (#30686571)
> Are there actually (current, available, lineage-supported(1)) COTS phones, where you can add your own signing keys, and then re-lock the boot-loader? With mainline/non_ancient Linux kernel?

You may want to check out https://grapheneos.org/

[ Parent | on HN ]
Re:Android 12 forces you to choose a default browser unless ... by stragies on Tuesday March 15, 2022 @11:45AM (#30686760)
Only supports the Pixel devices, no?

`fastboot flashing lock` is available on some phones, but is there a comprehensive list somewhere of devices, where you can freely/add remove signing keys?

[ Parent | on HN ]