news.volyx.in

Oneplus phone update introduces hardware anti-rollback (consumerrights.wiki)

465 points by validatori · 269 days ago · 278 comments on HN

Article summary

OnePlus has introduced a hardware-level anti-rollback mechanism in their latest firmware update, which prevents users from downgrading their devices or installing custom ROMs. This mechanism uses electronic fuses in the Qualcomm processor that are permanently blown when the update is installed, making it impossible to revert to older firmware. The update affects several OnePlus models, including the OnePlus 13, 13T, and 15. The company has not issued an official statement addressing the mechanism, but has removed download links for downgrade firmware.

Main themes

  • Anti-rollback mechanism
  • Custom ROMs
  • OnePlus firmware update
  • Hardware security
  • Device bricking
  • User freedom

What commenters say

  • The introduction of the anti-rollback mechanism is a deliberate attempt by OnePlus to prevent users from installing custom ROMs and force them to use the latest vendor firmware.
  • The mechanism is a necessary security measure to prevent downgrade attacks and protect users' devices from potential vulnerabilities.
  • OnePlus's decision to implement the anti-rollback mechanism without warning or explanation is a betrayal of their former reputation as a user-friendly and customizable brand.
  • The use of electronic fuses to prevent downgrades is a common practice in the industry, and OnePlus is simply following suit to comply with security requirements.
  • The mechanism's impact on custom ROM users is a significant concern, as it may render their devices unusable if they attempt to install incompatible firmware.
  • The lack of transparency and communication from OnePlus regarding the anti-rollback mechanism has led to widespread criticism and mistrust among users.
  • The introduction of the anti-rollback mechanism may be related to a bug that allowed stolen devices to be re-enabled, and is intended to prevent similar exploits in the future.
  • The mechanism is an example of corporate greed and a desire to control users' devices, rather than a genuine attempt to improve security or user experience.