I've published sample releases of AOSP 9 with the next generation hardened malloc implementation and some other changes at seamlessupdate.app. It's at the domain I registered for the Updater app for the time being since I don't have a name for the OS hardening project yet.
Conversation
Replying to
The installation process is the same as the stock factory images: enable unlocking in the OS, enter fastboot mode (adb reboot bootloader or the button combo on boot), `fastboot flashing unlock`, `./flash-all.sh` in fastboot mode and then `fastboot flashing lock` in fastboot mode.
1
3
It's a bit simpler than in the past since I bundled the Android Verified Boot custom key into the factory images and it's set by the flash-all.sh script. To fully revert back to stock, you'll need to manually use `fastboot erase avb_custom_key` to untrust that key.
1
What makes you motivated to implement the OpenBSD pattern over extending the default google/Linux one to counter memory corruption?, is the default implement ation that bad ? Can you give a real life exploit use case?
1
Show replies