Hacker News Reader

I wonder if any of these leaked keys were used to sign the base android installers for the phones themselves?

If so, this might be a way to get new versions of AOSP onto Samsung phones that are bootloader-locked and have no current support by Samsung. Can anyone anyone experienced with Android+Samsung comment here?

View on HN

That was my first thought after "oh fuck". Does this mean any current Samsung phone can now be rooted by the user?

Well, I think you could potentially sign any rooting app at least.

I'd like to see os-level signing so we can take older devices like Samsung tablets and put Samsung-less Android on it.

I'm guessing it's different depending on model, but on my SM-X900 (US model Tab S8 Ultra), the key used to sign the vbmeta image (Android verified boot's root of trust) is different from every key used to sign the system apps.

Yeah that's my understanding as well

Reply on news.ycombinator.com