Hacker News Reader

Comment by zb3 | Hacker News Reader

> Root access refers to the highest level of privileges a user can be granted to a computer system.

This is no longer true. You might have root access on your smartphone, but you still don't have access to the TEE (on ARM this is implemented using the "TrustZone" "feature").

Also, AVF is coming to Android, and protected VMs won't work with unlocked bootloader.. so expect the situation to deteriorate further once manufacturers make use of pVMs..

View on HN

There's not nearly enough awareness of this. Even with root access, on modern Android you have to set up a virtual USB connection just to get at the files in the data folders of android apps if you want to, for example, sync the savegames between your mobile emulators and your desktop emulators. It's fucking disgusting. With every new edition they shave off a little more user agency.

What do you mean "a virtual USB connection"? With root access I can see all the files on my Android phone.

A PC can access those folders but even with root and "all files access" android file managers can't on recent versions of Android. Shizuku or apps like it allow file managers to access those folders by pretending to be a PC. Folders like the contents of android/data for each app. Without it you just see empty folders. It's ridiculous.

Hmm really? That sucks, I guess this is after 14 or so? I'm running 12 or 13.

Right. Personally I think Android has gotten worse with every single update since 4.4

It's sad how Google has perverted what Android was meant to be.

The TEE is where both the device encryption keys (not DRM) and Widevine keys (DRM) are stored..

So basically a TDM?

basically a hardwired authenticator dongle that the user cannot touch

Yeah I mean theres not even any way to really know what your communicating with without taking the thing apart and following the traces + an ocilliscope. If it was worth obfuscating to a determined company it would be hell to figure out.

You could just be a sandbox root which is pointed at a guest user in a higher namespace.

Reply on news.ycombinator.com