[ot][spam][personal] uhhh should I understand the exploits my new phone is vulnerable to

Undiscussed Horrific Abuse, One Victim of Many gmkarl at gmail.com
Sat May 7 00:06:11 PDT 2022


the device class is likely at
https://github.com/amonet-kamakiri/kamakiri/blob/master/modules/common.py .
it's okay to paste it in I believe.

a cursory glance and I notice the code is downgrading the firmware. this
would work since older versions have the same signature. an interesting
problem present in all instances of signed bootware, probably resolvable by
protocol improvements, like tiers of fuses or something.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/html
Size: 582 bytes
Desc: not available
URL: <https://lists.cpunks.org/pipermail/cypherpunks/attachments/20220507/ddce50d8/attachment.txt>


More information about the cypherpunks mailing list