Is Google Pixel actually good for privacy? - eviltoast

I hear many people say that the Google Pixel is good for privacy, but is it?

I’m asking this because I find it weird, of all the companies, Google having the most “privacy”.

  • newIdentity@sh.itjust.works
    2·
    1 year ago

    With unlocked bootloader you can dump the data and brute force the password. With locked bootloader on pixel devices, you can’t even do that.

    • CatWhoMustNotBeNamed@geddit.social
      1·
      1 year ago

      From what I’ve read, that doesn’t really work - you’d need the encryption key, not the pin/password, because of how the encryption platform works.

      Again, it’s been a while, and this isn’t my field. I just remember being properly surprised at how little I understood - that the pin/password are merely keys to accessing the encryption key, and it’s all tied together in validating during hoot. Like you can’t image the system and drop it in another phone if it’s been encrypted, even if you have the pin - the encryption system on the different hardware would calculate things incorrectly (I did this once, dropped an encrypted image on a duplicate phone. That was fun trying to figure out why it wouldn’t work).

      There’s more to the puzzle that’s frankly above my pay grade, but last time I read about how to get into an encrypted phone, (even boot unlocked) required the expertise and tools of certain types of folks. Not your average “haxxor”.

      Granted, that expertise and those tools are getting closer to us every day…

      • newIdentity@sh.itjust.works
        2·
        1 year ago

        I thought the security chip was being disabled when unlocking the bootloader but apparently it just skips image validation.

        So basically you can flash anything (which kinda is what you want). You could theoretically also modify the system files to being able to bruteforce your pincode.

        Unlocking the bootloader also makes your device less secure in other ways. When there’s a root exploit in Android verified boof safes you from it being exploited.

        • CatWhoMustNotBeNamed@geddit.social
          2·
          1 year ago

          Good point about root exploit. It’s a potential.

          Thing is, every Linux server and windows box suffers the same risk… But we don’t hear “the sky is falling” about those… Because it’s considered a measured risk and security is layered. As it should be.

          Hell, people still run windows laptops unencrypted today - which is far worse than an unlocked bootloader on Android.