Remix.run Logo
IshKebab 8 hours ago

Why? What advantage do they get from this? I'm assuming it's not a good one but I'm struggling to see what it is at all.

jeroenhd 7 hours ago | parent | next [-]

They patched a low-level vulnerability in their boot process. Their phones' debug features would allow attackers to load an old, unpatched version of their (signed) software and exploit it if they didn't do some kind of downgrade prevention.

Using eFuses is a popular way of implementing downgrade prevention, but also for permanently disabling debug flags/interfaces in production hardware.

Some vendors (AMD) also use eFuses to permanently bond a CPU to a specific motherboard (think EPYC chips for certain enterprise vendors).

hexagonwin 8 hours ago | parent | prev [-]

They can kill custom roms and force the latest vendor firmware. If they push a shitty update that slows down the phone or something, users have no choice other than buying a new device.

bcraven 8 hours ago | parent [-]

The article suggests custom roms can just be updated to be 'newer' than this.

At the moment they're 'older' and would class as a rollback, which this fuse prevents.