diff --git a/about.html b/about.html index 8e4a1bf..104cc79 100644 --- a/about.html +++ b/about.html @@ -71,36 +71,49 @@
They also include a hardware security module - (Titan M2, improving on the first generation + (Titan M2, improving on the previous generation Titan M) which is extremely resistant to both remote and physical attacks due to being completely isolated from the rest of the system, including the operating system. Titan M2 ensures that the device cannot be remotely compromised by requiring the side buttons of the device to be physically pressed for some sensitive operations. Titan M2 also takes the role of - Android Strongbox Keymaster, + Android StrongBox Keymaster, a hardware-backed Keystore containing sensitive user keys which are unavailable to - the OS or apps running on it without authorisation from Titan M2 itself. Insider attack - resistance ensures that Titan M2 firmware can be flashed only if the user PIN/password + the OS or apps running on it without authorisation from Titan M2 itself. + Insider attack + resistance ensures that Titan M2 firmware can be flashed only if the user PIN/password is already known, making it impossible to backdoor the device without already knowing these secrets.

- Google Pixel device kernels are compiled with fine-grained, forward-edge control-flow - integrity and backward-edge control-flow integrity to prevent code reuse attacks against - the kernel. MAC address randomisation is implemented well, with minimal probe requests - and randomised initial sequence numbers.
+ Google Pixel device kernels are compiled with + forward-edge control-flow integrity and + backward-edge control-flow integrity to prevent code reuse attacks against + the kernel. MAC address randomisation is + implemented well, along with minimal probe requests and randomised initial sequence numbers.

- Google releases guaranteed monthly security updates, ensuring Google Pixel devices are + Google releases + guaranteed monthly security updates, ensuring Google Pixel devices are up-to-date and quickly protected against security vulnerabilities.

Pixel 6-series devices are a large improvement over the already very secure and private previous generation Pixel devices. They replace ARM-based Titan M with RISC-V-based Titan M2, reducing trust by removing ARM from the equation. Titan M2 is more resiliant to attacks than - Titan M, and is AVA_VAN.5 certified, the highest level of vulnerability assessment. Google's + Titan M, and is + AVA_VAN.5 certified, the highest level of vulnerability assessment. Google's in-house Tensor SoC includes Tensor Security Core, further improving device security.
- Pixel 6-series devices are supported for a minimum of 5 years from launch, an increase from - previous generations' support lifecycles of 3 years. + Pixel 6-series devices are supported for a + minimum of 5 years from launch, an increase from + previous generations' + support lifecycles of 3 years.