5 ms·
Why not? Do the Android packages Samsung sends to its own TVs use a different key or security mechanism? (Do we expect Samsung better protects its TV keys, tha
by gojomo 4y ago
Why not? Do the Android packages Samsung sends to its own TVs use a different key or security mechanism?
(Do we expect Samsung better protects its TV keys, than its smartphone keys?)
- 2OEH8eoCRo0 4y agoI think you'd also need their SSL cert for the HTTPS request.
- gojomo 4y agoAre you assuming Samsung's updates rigorously use SSL, with proper certificate checking, or do you know that to be the fact? These sorts of consumer-device companies often take other unwise security-through-obscurity, or only "folk-secure", shortcuts elsewhere – rather than defense in depth. For example, thinking their app-signing keys secure, maybe they used something other than SSL, or SSL in some no-certificate-validation-mode. It happens more than it should, with giant consumer-electronics conglomerates, even!
- izacus 4y agoFor starters: Because there are no Samsung TVs running Android which should be trivially verifiable via Google. :)