News for hackers. Stuff that matters.

A comment on Google Pixel Binary Transparency: verifiable security for Pixel devices.

Re:Google Pixel Binary Transparency: verifiable security for... by fidotron on Monday August 21, 2023 @05:10PM (#37215409)
The elephant in the room, for Google and Microsoft, is verifiable security is worthless if no one actually trusts the organization that released the verified firmware.

Android should be have been split off from Google a long time ago.

[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by judge2020 on Monday August 21, 2023 @05:20PM (#37215524)
If you're using Pixel with stock OS, you trust them anyways - it's about making sure your phone hasn't been tampered with by another party.
[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by benatkin on Monday August 21, 2023 @06:03PM (#37215955)
It doesn't mean that, it just means you selected it out of the available options.
[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by judge2020 on Monday August 21, 2023 @06:26PM (#37216164)
How does this relate to verifying that the software running is the same as what google ships to everyone?
[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by benatkin on Monday August 21, 2023 @06:37PM (#37216285)
I'm responding to "you trust them anyways"

How does using a device mean you trust the vendors?

That's wrong. It's like saying you trust your governor because you live in a particular U. S. state.

[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by judge2020 on Monday August 21, 2023 @06:47PM (#37216371)
If you don't trust them, why verify the integrity of the software blob they ship with their hardware at all?
[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by spencerflem on Monday August 21, 2023 @07:48PM (#37216822)
that was the point of the original comment
[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by benatkin on Monday August 21, 2023 @08:02PM (#37216905)
I still want to make sure it's the correct download. And yes I think of the preloaded OS as a sort of download.
[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by fulafel on Monday August 21, 2023 @11:59PM (#37218523)
Trust isn't binary, there are several dimensions and varying levels of trust along those.
[ Parent | on HN ]
Re:Google Pixel Binary Transparency: verifiable security for... by pkaye on Monday August 21, 2023 @07:27PM (#37216692)
And who would fund that version of Android?
[ Parent | on HN ]