Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Measured boot isn't any better. Look at Android phones, where it's technically possible to unlock your bootloader, but a ton of apps (e.g., McDonald's and most banking apps) use remote attestation to see whether you did so and will refuse to work if you did.


Yep.

Exactly why i said

> turn off these measures in a way that is undetectable.

If you own the device, you ought to have the means to make such configuration/changes in undetectable ways. Otherwise, you don't truly own the device.

Some apps want to run on devices that you don't "own", because they are doing something the owner would not want done (in secret or what not).


McDonald's does that? Their App works fine on Lineage 22.



Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: