Attestation isn't against being able to do whatever you want with your own device. It just means that if you want other people to trust your custom device you need to get them to trust your signing key.

▲

dns_snek an hour ago | parent | next [-]

Pray tell, how might you get them to trust your signing key? Do you just email Mr. Pichai and ask nicely, is that enough?

▲

foltik an hour ago | parent | prev [-]

Not sure if you’re being deliberately obtuse, but a signing key means nothing by itself. What exactly do you think is being attested TO?

Thats right: that the user can’t do what they want with their own device. Obviously your key wouldn’t be trusted if they could.

There is no other conceivable purpose that attestation could serve.

	▲	dns_snek an hour ago \| parent [-]
		> Not sure if you’re being deliberately obtuse Yes, they are. If there's a thread on HN about user-hostile features, you can be pretty confident that they've written a comment defending it.