@quarkslab.bsky.social on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Quarkslab

quarkslab.bsky.social

did:plc:cp7tummvmqobio67sy2btiut

There is a small bug in the signature verification of OTA packages in the Android Open Source Framework. Official builds doing normal double verification of packages are not vulnerable but OEMs and third party apps may be. Jérémy Jourdois explains it here: https://blog.quarkslab.com/aosp_ota_signature_bug.html

2025-04-08T17:51:34.890Z