4 ms·

Unless you're rooted the updates are checked with the public key to make sure they are signed with the correct private key. Unless Google lost their set of pri

by shoota 15y ago

Unless you're rooted the updates are checked with the public key to make sure they are signed with the correct private key. Unless Google lost their set of private keys it wouldn't be possible to modify the update. It's entirely possible there are other exploits but a modified update.zip is not a likely vector.

avree 15y ago
I'd be willing to bet that 90% of people at Defcon with Androids had them rooted. Many were probably running custom ROMs.
- shoota 15y ago
  Then you'd be even more suspicious if a carrier OTA popped up on your phone.