Affiliate links on Android Authority may earn us a commission. Learn more.
Android 17 Beta 2 shows Google borrowing security features from Chrome OS
- Android 17 Beta 2 starts implementing support for restricting how Thunderbolt or USB4 devices access system memory.
- Just like on Chrome OS, that access could be limited by default, and require users to specifically grant it.
- Android’s Advanced Protection Mode may restrict your ability to override the limitation.
Android is already a lot more than just a mobile OS, and has found success in the home through Android TV. But the platform’s expansion onto new device types is really only just getting started, and maybe the most exciting area for its expansion now is onto desktop and laptop computers. Aluminium OS teases a new Android-powered way for us to compute, and Pixel users everywhere are already trying out Android’s Desktop Mode. We’re picking up a new whiff of Android’s increasing desktop-ification as we continue to dig through all the changes present in Android 17 Beta 2.
Meeting the needs of desktop computer users requires supporting a lot more hardware than a phone alone might need to — and that includes connectivity options, as well. High-speed wired interfaces are still king, and in Android 17 Beta 2 we can see Google working on Android support for something Chromebooks already offer: The ability to limit how Thunderbolt or USB4 devices access system memory.
Don’t want to miss the best from Android Authority?
- Set us as a favorite source in Google Discover to never miss our latest exclusive reports, expert analysis, and much more.
- You can also set us as a preferred source in Google Search by clicking the button below.
By default, Chrome OS restricts the ability of devices connected over Thunderbolt or USB4 from getting direct memory access. That kind of permission represents a lot of exposure from a security standpoint, so Google suggests you leave this off except with trusted devices and when there’s a real performance penalty from not using it.
Well, don’t look now, but with Android 17 Beta 2, we’re starting to see the same sort of access restriction being built into Android.
<string name="usb_pci_tunnel_title">Data access protection</string>
<string name="usb_pci_tunnel_control_summary">Allow USB and Thunderbolt devices to access system memory directly for maximum hardware speeds.
Note: This poses a security risk, so only connect devices you trust.</string>Just like on Chrome OS, Android is also preparing for enterprise tools for IT admins to be able to control that option across a fleet of devices.
<string name="usb_pci_tunnel_control_disallowed_by_enterprise_summary">Disabled by your IT admin</string>And lest you think this is just a bunch of old Chrome OS code being reused, we also see this same feature make reference to Android 16’s own Advanced Protection Mode.
<string name="usb_pci_tunnel_control_disallowed_by_apm_summary">Disabled by Advanced Protection Mode</string>Google seems to be building that out on a few fronts lately, and just earlier today we shared with you how Advanced Protection was adding new WebGPU restrictions in the name of security.
Right now, even Android 17 Beta 2 testers won’t see this new option on their Pixel phones — for the moment, we’re only finding these code references. But when it’s finally ready to go live, it looks like Google could make the setting visible on the same USB Preferences screen you see when setting file transfer options.
Thank you for being part of our community. Read our Comment Policy before posting.