A practical way to break #Android #hardware #attestation https://blog.quarkslab.com/bypassing-android-hardware-attestation.html

The "trusted device" debate reminds me of the late 90s debate whether its possible to #trust the #network. Its now clear that good security requires not trusting the network.

From where I sit, the "trusted device" debate is the same. Big companies are lazy and pretend the device can be trusted while companies pushing #DRM and other anti-democratic, anti-user functionality want #finance and #government as allies