I need a Pixel 3 for advancing my mobile security research. I don't have access to a current generation mobile device with a Snapdragon 845, the Linux 4.9 LTS with CFI and a StrongBox keymaster implementation.
Bitcoin address for contributing: 34J5mcUveTUr99ZNB2SnFxCPFjXQCAxyuB.
Conversation
This Tweet was deleted by the Tweet author. Learn more
Replying to
It's "STRONGLY RECOMMENDED" by the CDD (source.android.com/compatibility/) but it isn't mandatory.
It's likely that many or even most other phones won't provide it because they cut corners on security and avoid doing much more than the bare minimum required by the contract with Google.
This Tweet was deleted by the Tweet author. Learn more
Replying to
A Pixel will offer substantial security advantages over other Android phones even if they ship this feature. Most Android phone vendors fail at even delivering the basics like monthly security updates, especially with all non-mandatory recommended fixes in the extended bulletins.
1
Replying to
Even when narrowing it down to the phones shipping full monthly security updates, I don't think it's likely that others will have the same level of kernel hardening, hardware security features and attention to detail. The upgrades to future Android versions are also important.