Seems to me it wouldn't flash in the first place because as soon as you modify it you break the signature. If it was going to be that easy somebody would have done it with a previous OTA.On the Sprint G5, couldn't we use this to pull the Android 7.0 update file, modify it, replace it and then let it install since it wouldn't be able to revert?
we couldn't do it with previous OTAs because it required root permissions to write the file to my knowledge since it's not stored in the user partition.Seems to me it wouldn't flash in the first place because as soon as you modify it you break the signature. If it was going to be that easy somebody would have done it with a previous OTA.
On the Sprint G5, couldn't we use this to pull the Android 7.0 update file, modify it, replace it and then let it install since it wouldn't be able to revert?
Isn't the file still signed? And wouldn't modifying it at all break the signature? And isn't the big issue at hand that the bootloader won't flash an unsigned image?we couldn't do it with previous OTAs because it required root permissions to write the file to my knowledge since it's not stored in the user partition.
The OTA file should have less security on it than a TOT file.
Well, A update would trigger a refresh of all signatures wouldn't? especially a major version update. So if we can modify the update enough to force our signatures?Isn't the file still signed? And wouldn't modifying it at all break the signature? And isn't the big issue at hand that the bootloader won't flash an unsigned image?
Ah, well now you're over my head, so... maybe?Well, A update would trigger a refresh of all signatures wouldn't? especially a major version update. So if we can modify the update enough to force our signatures?