5 ms·

It could also mean people signing their own firmware and freeing those devices.

• brookst 4y ago
  It’s an app signing key. I don’t think it will work for firmware. But I’m not sure. Can someone more knowledgeable about Android’s chain of trust chime in?
  • themoonisachees 4y ago
    Signing your app using this key would allow you to name your app system.uid.android, effectively giving you root for free. You probably won't be able to sign firmware in the Linux sense of the word, but in android world "firmware" is loosely defined and is often used to talk about the android ROM.
    • lalopalota 4y ago
      that's what i am looking for. any ideas on how to find the key?
    • stop50 4y ago
      On android only the apps and updates are signed. In the normal system state is the only writable part the encrypted data partition, system,vendor and product are readonly mounted and can be only be mounted in the writable mode after an update is verified and the update binary mounts the partition writable.
  • g_p 4y ago
    This isn't the OTA signing key, although on some cheap devices I have seen the platform key also be used to sign OTAs...
• ipdashc 4y ago
  But the key isn't publicly leaked, right? It's just whoever is signing the malware that has it.