4 ms·
Even if those updates require signature verification with a public key stored in ROM? I guess the signing key cold get out or you could patch the firmware to sk
by infinite8s 10y ago
Even if those updates require signature verification with a public key stored in ROM? I guess the signing key cold get out or you could patch the firmware to skip the signature check (the way the initial iPhone was jailbroken)
- heavenlyhash 10y agoWe also literally just had the Windows key leaks within the last week. Un-updatable signing keys are still an uncloseable exploit vector. (And updatable signing keys are an uncloseable exploit vector. You can't win.) Physical-access-only updates: yes please. We know what the security boundary is on those, and how to reset it.