Conversation

This Tweet was deleted by the Tweet author. Learn more

Replying to

and

It's a mix of insecure client-side checks with some potentially useful server-side checks that are generally not implemented in an exhaustive or robust way so they're also generally insecure, but less obviously broken. Applies to most user-facing OEM and ROM security features.

Replying to

and

Features are implemented to be able to list a bunch of things that sound useful to end users, while not actually caring if those things are implemented in a way that actually works or if they even have a valid use case / threat model in the first place. Infosec in a nutshell.

1:21 PM · Mar 2, 2019Twitter Web Client