An archive of some of my Android hardening work is available at https://t.co/KelvcbRZtC.

For now, the userspace code remains under the same non-commercial license and this won't be changed without an agreement being reached with Copperhead.

I stripped out the legacy branding.

— Daniel Micay (@DanielMicay) June 12, 2018

I no longer have an income and won't be working on this anymore. I just wanted to make sure there was an archive of some of the work. It's not all there due to lots not being ported to 5.x/6.x/7.x/8.x. Incomplete features that were in development or stalled also aren't there.

— Daniel Micay (@DanielMicay) June 12, 2018

Samsung Galaxy S9 / S9+ is missing hardware-backed key rollback resistance, per-profile encryption keys (lacks file-based encryption), A/B updates and Android Verified Boot 2.0.

It's very telling that anything Google doesn't make into a hard requirement doesn't get implemented.

— CopperheadOS (@CopperheadOS) April 12, 2018

https://t.co/OUf86TcH7Y Since they built illegitimate businesses on the *official releases*, it doesn't matter that any checks we implement will be open source code…

— CopperheadOS (@CopperheadOS) November 14, 2017

Users on devices that were sold illegally will be able to contact us to purchase a commercial license to have the device whitelisted. Many of these devices will have been sold with potentially malicious apps / device managers installed and we'll be able to help with that too.

— CopperheadOS (@CopperheadOS) November 14, 2017

https://t.co/h8hjRbvOT5

No, they steal our work and use it against the terms of the licensing forbidding commercial usage. They download our Nexus releases, flash them onto phones, add their apps and sell them to organized crime.

Why should we keep offering downloads for them?

— CopperheadOS (@CopperheadOS) November 12, 2017

They can take our sources and even our unaltered releases and sell refurbished phones as new to organized crime. Our license forbids it and we're willing to enforce that in court but they have bigger legal issues than us.

It's not possible to expect people to act in good faith.

— CopperheadOS (@CopperheadOS) November 12, 2017

The only thing we're committed to doing is honoring our update / support commitments to customers. We're not locked into doing this for the rest of our lives if we decide it's not working out and the way we do it is in flux and needs to change based on what does and doesn't work.

— CopperheadOS (@CopperheadOS) November 12, 2017

Giving everything away for free under permissive licensing wasn't ever going to work out.

Our expectation of being able to make money on support and custom work on open source software was extremely far from the mark.

Rather than giving up, we've kept adapting to keep on going.

— CopperheadOS (@CopperheadOS) November 12, 2017

We've enabled over-the-air updates again to avoid impacting our remaining customers on Nexus devices and other legitimate users. However, downloads on the site will no longer be available and we'll be making changes to the update client for Nexus devices. https://t.co/jJTI6fpy5b

— CopperheadOS (@CopperheadOS) November 11, 2017