Google Reimagined a Phone. It was Our Job to Red Team and Secure it.
...This talk will go over how Android secured the reimagined Pixel 6 before its launch, focusing on the perspective of the Android Red Team. The team will demonstrate how fuzz testing, black box emulators, static analysis, and manual code reviews were used to identify opportunities for privileged code execution in critical components such as the first end-to-end proof of concept on the Titan M2 chip, as well as ABL with full persistence resulting in a bypass of hardware key attestation. Finally, the Android Red Team will demonstrate multiple security-critical demos...
By: Christopher Cole , Farzan Karimi , Eugene Rodionov , Xuan Xing
Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefi...
