diff options
| author | Holger Hans Peter Freyther <holger@moiji-mobile.com> | 2016-12-27 15:32:40 +0100 |
|---|---|---|
| committer | Holger Hans Peter Freyther <holger@moiji-mobile.com> | 2016-12-27 15:32:40 +0100 |
| commit | 60af50b63cf84549c974297d57263d16ac74f426 (patch) | |
| tree | 1c10e3aeabe3df60e496bf0864ca03711eadd737 /2016/33c3/33c3-modems.adoc | |
| parent | db4ce050a30e6826dc6a2cd693358d0cf096434b (diff) | |
Simplify the FOTA section as no one can follow it anyway
Diffstat (limited to '2016/33c3/33c3-modems.adoc')
| -rw-r--r-- | 2016/33c3/33c3-modems.adoc | 27 |
1 files changed, 7 insertions, 20 deletions
diff --git a/2016/33c3/33c3-modems.adoc b/2016/33c3/33c3-modems.adoc index bb3948f..bf37f4d 100644 --- a/2016/33c3/33c3-modems.adoc +++ b/2016/33c3/33c3-modems.adoc @@ -266,23 +266,18 @@ image:images/redbend.png[height=76,role="gimmick_right"] == RedBend (delta update) software -* Used in OMA DeviceManagement? (e.g. https://www.blackhat.com/docs/us-14/materials/us-14-Solnik-Cellular-Exploitation-On-A-Global-Scale-The-Rise-And-Fall-Of-The-Control-Protocol.pdf[Solnik]) +* Used in OMA DeviceManagement? (e.g. https://www.blackhat.com/docs/us-14/materials/us-14-Solnik-Cellular-Exploitation-On-A-Global-Scale-The-Rise-And-Fall-Of-The-Control-Protocol.pdf[Mathew Solnik]) * Lots of starring at hexdumps, lots of help from Dieter Spaar -* Binary file format to diff, inserts, remove, link files -* Can update images/mtd partitions too -* Variable sized LZMAed Table Of Contents -** Filenames separated with 0x00 -** Permissions separated with 0xAF -** Sections for diff, inserts with crc32, filesize, permission -* Heavy in pointers/offsets, not robust +* Created tools to partially extract and create .diff files +* Heavy in pointers/offsets, not robust, crashes * Not cryptographically signed! -* Created tools to partially extract and create .diff file -image:images/delta_header.png[width=600] +image:images/delta_header.png[width="80%"] == Firmware upgrade overview +image:images/upgrade_process.png[width="55%",role="gimmick_right"] //[source] ---- $ strings atfwd_daemon | egrep "wget|QCMAP|fota|update.z" @@ -300,19 +295,11 @@ Start download fota for update.zip * Add status and reboot to recovery * Apply update.zip and reboot -== Firmware upgrade process - -image:images/upgrade_process.png[] - -* Applies what ever was downloaded... -* Assumes no MITM is possible - - == Recommedation -* Continue to allow owners of devices to reflash +* Please keep it open, good for learning +* Allow owners to modify the software of their device * Secure the FOTA upgrading with owner specified keys -* Make it more easy to rebuild code == Questions |