5 ms·

So, does it look like (auto-)updates of Samsung 'Smart' TVs could be tricked into acepting malware?

• izacus 4y ago
  No.
  • gojomo 4y ago
    Why not? Do the Android packages Samsung sends to its own TVs use a different key or security mechanism? (Do we expect Samsung better protects its TV keys, than its smartphone keys?)
    • 2OEH8eoCRo0 4y ago
      I think you'd also need their SSL cert for the HTTPS request.
      • gojomo 4y ago
        Are you assuming Samsung's updates rigorously use SSL, with proper certificate checking, or do you know that to be the fact? These sorts of consumer-device companies often take other unwise security-through-obscurity, or only "folk-secure", shortcuts elsewhere – rather than defense in depth. For example, thinking their app-signing keys secure, maybe they used something other than SSL, or SSL in some no-certificate-validation-mode. It happens more than it should, with giant consumer-electronics conglomerates, even!
    • izacus 4y ago
      For starters: Because there are no Samsung TVs running Android which should be trivially verifiable via Google. :)