- | Smartphone |
-
+ | Smartphone |
+
-
Google Pixel
+ |
+
+ Security/Privacy
+ Google Pixel devices are the best Android
+ devices available on the market for
+ security and privacy.
+ They allow locking the bootloader with a
+ custom Android Verified Boot (AVB) key
+ in order to preserve security and privacy
+ features when installing a custom operating
+ system, such as
+ verified boot
+ which verifies that the OS has not been
+ corrupted or tampered with, and
+ rollback protection
+ which prevents an adversary from rolling
+ back the OS or firmware version to a
+ previous version with known security
+ vulnerabilities.
+ They also include a
+ hardware security module
+ (Titan M2, improving on the previous
+ generation
+ Titan M)
+ which is extremely resistant to both remote
+ and physical attacks due to being completely
+ isolated from the rest of the system,
+ including the operating system. Titan M2
+ ensures that the device cannot be remotely
+ compromised by requiring the side buttons of
+ the device to be physically pressed for some
+ sensitive operations. Titan M2 also takes
+ the role of
+ Android StrongBox Keymaster,
+ a
+ hardware-backed Keystore
+ containing sensitive user keys which are
+ unavailable to the OS or apps running on it
+ without authorisation from Titan M2 itself.
+ Insider attack resistance
+ ensures that Titan M2 firmware can be
+ flashed only if the user PIN/password is
+ already known, making it impossible to
+ backdoor the device without already knowing
+ these secrets.
+ Google Pixel device kernels are compiled
+ with
+ forward-edge control-flow integrity
+ and
+ backward-edge control-flow integrity
+ to prevent code reuse attacks against the
+ kernel. MAC address randomisation is
+ implemented well, along with minimal probe requests and randomised initial sequence numbers.
+ Google releases
+ guaranteed monthly security updates,
+ ensuring Google Pixel devices are up-to-date
+ and quickly protected against security
+ vulnerabilities.
+ Pixel 6-series and 7-series devices are a
+ large improvement over the already very
+ secure and private previous generation Pixel
+ devices. They replace ARM-based Titan M with
+ RISC-V-based Titan M2, reducing trust by
+ removing ARM from the equation. Titan M2 is
+ more resiliant to attacks than Titan M, and
+ is
+ AVA_VAN.5 certified,
+ the highest level of vulnerability
+ assessment. Google's in-house Tensor
+ System-on-Chip includes Tensor Security
+ Core, further improving device security.
+ Pixel 8-series includes Armv9's
+ Memory Tagging Extension,
+ which dramatically increases device security
+ by eliminating up to 95% of all security
+ issues caused by memory-unsafety.
+ Support
+ Pixel 4a (5G), Pixel 5, and Pixel 5a, are
+ supported for a
+ minimum of 3 years from launch.
+ Pixel 6-series, Pixel 7-series, Pixel
+ Fold, and Pixel Tablet, are supported for a
+ minimum of 5 years from launch.
+ Pixel 8-series is supported for a
+ minimum of 7 years from launch,
+ putting it on the same support level as
+ Apple; Google have even surpassed Apple in
+ this regard, as Apple does not commit to a
+ support timeframe for their devices.
|
-
- Google Pixel devices are
- the best Android devices
- available on the market
- for
- security and privacy.
- They allow locking the
- bootloader with a
- custom Android Verified Boot (AVB) key
- in order to preserve security
- and privacy features when
- installing a custom operating
- system, such as
- verified boot
- which verifies that the OS has
- not been corrupted or tampered
- with, and
- rollback protection
- which prevents an adversary from
- rolling back the OS or firmware
- version to a previous version
- with known security vulnerabilities.
- They also include a
- hardware security module
- (Titan M2, improving on the
- previous generation
- Titan M)
- which is extremely resistant to
- both remote and physical attacks
- due to being completely isolated
- from the rest of the system,
- including the operating system.
- Titan M2 ensures that the device
- cannot be remotely compromised
- by requiring the side buttons of
- the device to be physically
- pressed for some sensitive
- operations. Titan M2 also takes
- the role of
- Android StrongBox Keymaster,
- a
- hardware-backed Keystore
- containing sensitive user keys
- which are unavailable to the OS
- or apps running on it without
- authorisation from Titan M2 itself.
- Insider attack resistance
- ensures that Titan M2 firmware
- can be flashed only if the user
- PIN/password is already known,
- making it impossible to backdoor
- the device without already
- knowing these secrets.
- Google Pixel device kernels
- are compiled with
- forward-edge control-flow integrity
- and
- backward-edge control-flow integrity
- to prevent code reuse attacks
- against the kernel. MAC address
- randomisation is
- implemented well, along with minimal probe requests and randomised initial sequence numbers.
- Google releases
- guaranteed monthly security updates,
- ensuring Google Pixel devices
- are up-to-date and quickly
- protected against security
- vulnerabilities.
- Pixel 6-series and 7-series
- devices are a large improvement
- over the already very secure and
- private previous generation
- Pixel devices. They replace
- ARM-based Titan M with
- RISC-V-based Titan M2, reducing
- trust by removing ARM from the
- equation. Titan M2 is more
- resiliant to attacks than Titan
- M, and is
- AVA_VAN.5 certified,
- the highest level of
- vulnerability assessment.
- Google's in-house Tensor
- System-on-Chip includes Tensor
- Security Core, further improving
- device security.
- Pixel 8-series includes Armv9's
- Memory Tagging Extension,
- which dramatically increases
- device security by eliminating
- up to 95% of all security issues
- caused by memory-unsafety.
- Pixel 6-series and 7-series
- devices are supported for a
- minimum of 5 years from launch,
- an increase from previous
- generations'
- minimum support lifecycles of 3 years.
- Pixel 8-series is supported for
- a
- minimum of 7 years from launch,
- putting it on the same support
- level as Apple; Google have even
- surpassed Apple in this regard,
- as Apple does not commit to a
- support timeframe for their
- devices.
+ |
|