We had previously been unaware of this, but some Best Buy locations will sell the Verizon Pixel 3 at full retail even without a Verizon account. What's more, as a CNET report notes, the Titan M chip is a dedicated chip of Google's own making - not part of the Qualcomm Snapdragon 845 processor, which already boasts an assortment of security features. Just like always, tech enthusiasts were casually excited for the Google Pixel 3 XL teardown.
The Pixel 3 XL as dismantled by iFixit. In this version of Android, developers can have their apps utilize StrongBox KeyStore APIs for generating and storing these private keys in Titan M. Google says that utilizing these APIs can help make sure that it is the user and not something else confirming a mobile transaction. This prevents malicious software from moving your device back to older, more vulnerable versions during booting. One of the features of Titan M is security in the bootloader. The battery on the Pixel 3 is a 2915mAh Li-Ion unit, while the Pixel 3 XL gets a larger 3430mAh battery. Once the passcode has been verified, the Titan M allows for decryption - and the secure flash and fully independent computation of Titan M, Xin's post adds, also makes it harder for an attacker to tamper with the process to learn what they need to decrypt your data.
Titan M likewise brings Protected Confirmation on Android 9, which is an API designed for protecting "the most security-critical operations", according to Google. The firmware on the Titan M can only be updated with a successful passcode attempt. In other words, it could possibly be up to 24 hours from the time you first activate it on Verizon's network.
While trying to take the phone apart, the iFixit guy broke a few internals since the device was poorly constructed. iFixit know their things, which means the device may have some serious components structuring issues.