5

Google gives developers a way to sidestep Android 13’s one-way update

 2 years ago
source link: https://arstechnica.com/gadgets/2022/08/google-gives-developers-a-way-to-sidestep-android-13s-one-way-update/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Honestly, there's not much difference —

Google gives developers a way to sidestep Android 13’s one-way update

Google posts an anti-rollback workaround, but only for developers.

Ron Amadeo - 8/31/2022, 5:12 PM

The Pixel 6 Pro.
Enlarge / The Pixel 6 Pro.
Ron Amadeo

With the rollout of Android 13 to the Pixel 6 and 6a, Google posted an interesting warning on the system image website: Once you flash Android 13, you can never go back to the old version. That's still the case for anyone wanting a fully functional phone, but now, Google has posted an Android 12 "developer support image" that will let developers roll back their phones even after upgrading. The "developer" branding on the image means it's not fully functional, but it will be good enough for app testing.

The reason for Google's one-way Android 13 update is a bootloader vulnerability. The bug is in the Pixel 6, 6 Pro, and 6a, so only those Pixels got a one-way update. Android 13 has a fix for the bootloader vulnerability, and to stop attackers from rolling back a device to get around the patch, the company triggered anti-rollback protection on the Pixel 6 and 6a. Anti-rollback protection blows a physical fuse inside the phone SoC. There are several of these fuses, and each OS version has a count of how many blown fuses it expects. If the number is too high, that means Google has flagged that OS as insecure and out of date, and it will no longer boot.

Advertisement

This "developer support image" is new territory for Google. The company says this special image of Android 12 fixes the bootloader bug and has the fuse counter incremented so it will still boot. It won't get any automatic updates, though, and it's not Compatibility Test Suite (CTS)‑approved. The CTS is a check that promises an OS is unmodified, not rooted, and secure, and some banking apps and online games require passing this check in order to work. You'll also have to do a full wipe of a device if you ever want to go back to the normal, "public" builds and updates.

If you're still interested, Google has builds of Android 12 and 12L for the Pixel 6, 6 Pro, and 6a on developer.android.com.


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK