diff --git a/about.html b/about.html index 7b386cd..05f0aa8 100644 --- a/about.html +++ b/about.html @@ -52,24 +52,29 @@
Google Pixel 6 Google Pixel devices are the best Android devices available on - the market for security and privacy.
+ the market for + security and privacy.

- They allow locking the bootloader with a custom Android Verified Boot (AVB) - key in order to preserve security and privacy features when installing a custom - operating system, such as verified boot which verifies that the OS has not been - corrupted or tampered with, and rollback protection which prevents an adversary - from rolling back the OS or firmware version to a previous version with known - security vulnerabilities.
+ They allow locking the bootloader with a + custom Android Verified Boot (AVB) + key in order to preserve security and privacy features when installing a custom + operating system, such as + verified boot + which verifies that the OS has not been corrupted or tampered with, and + rollback protection + which prevents an adversary from rolling back the OS or firmware version to a + previous version with known security vulnerabilities.

- They also include a hardware security module (Titan M2) which is extremely resistant - to both remote and physical attacks due to being completely isolated from - the rest of the system, including the operating system. Titan M2 ensures that - the device cannot be remotely compromised by requiring the side buttons of the - device to be physically pressed for some sensitive operations. Titan M2 also - takes the role of Android Strongbox keystore, containing sensitive user keys which - are unavailable to the OS or apps running on it without authorisation from Titan M2 - itself. Insider attack resistance ensures that Titan M2 firmware can be flashed only - if the user PIN/password is already known, making it impossible to backdoor the device + They also include a hardware security module + (Titan M2, improving on the first generation Titan M) + which is extremely resistant to both remote and physical attacks due to being + completely isolated from the rest of the system, including the operating system. + Titan M2 ensures that the device cannot be remotely compromised by requiring the + side buttons of the device to be physically pressed for some sensitive operations. + Titan M2 also takes the role of Android Strongbox keystore, containing sensitive user + keys which are unavailable to the OS or apps running on it without authorisation from + Titan M2 itself. Insider attack resistance ensures that Titan M2 firmware can be flashed + only if the user PIN/password is already known, making it impossible to backdoor the device without already knowing these secrets.

Google Pixel device kernels are compiled with fine-grained, forward-edge control-flow @@ -119,8 +124,8 @@ apply includes stack protection, signed integer overflow wrapping, and GrapheneOS' hardened_malloc memory allocator.

- You can find my personal Gentoo Linux configuration - here. + You can find my personal Gentoo Linux configuration in my personal + configuration respository. Open source

(GPLv2-only) @@ -170,9 +175,15 @@ codebase. Its hardening includes closing gaps for apps to access sensitive system information, a secure app spawning feature which avoids sharing address space layout and other secrets AOSP's default Zygote app spawning model would - share, GrapheneOS' own hardened memory allocator (hardened_malloc) to protect - against common memory corruption vulnerabilties, hardened Bionic standard C library, - and local and remote hardware-backed attestation (Auditor) to ensure the OS has + share, + hardened kernel, + hardened memory allocator + (hardened_malloc) + to protect against common memory corruption vulnerabilties, + hardened Bionic standard C library, + stricter SELinux policies, + and local and remote hardware-backed attestation + (Auditor) to ensure the OS has not been corrupted or tampered with. GrapheneOS only supports devices which receive full support from their manufacturers, including firmware updates, long support lifecycles, secure hardware, and overall high security practices.
@@ -196,8 +207,8 @@ compilation by default, stubbing out the battery status API to prevent abuse of it, and always-on Incognito mode as an option.

- Vanadium's source code repository, including its Chromium patchset, can be found - here. + Vanadium's source code, including its Chromium patchset, can be found in its + official repository. Open source

(GPLv2-only)