How do you know Pixel's hardware is secure?

dearo_de

Because Google says so?

You guys seem to be promoting Pixel as a "secure" device, how do you know that?
Everything they do is closed-source, from their Bootloaders to microcode.
How do you trust a profit-driven company's statement about security with an unauditable proprietary blob?

DeletedUser87

dearo_de Well, first because they give you money if you break the security, or because companies like Cellebrite (which I would call experts in the field) can't get in and third - the GOS team has to work with these security features on a day to day basis.

DeletedUser370

dearo_de I think this post might be able to answer your question, at least partially: https://discuss.grapheneos.org/d/10150-not-your-average-why-pixel-thread/7

de0u

dearo_de How do you trust a profit-driven company's statement about security with an unauditable proprietary blob?

As others wrote, there are reasons to expect that a deliberate conspiracy would be unmasked (for example, Lenovo, Sony BMG).

Meanwhile, a phone with 100% open hardware and firmware would be great! But until there is one, running on one isn't an option.