eMudhra key leaks break Android Factory Reset Protection via GMS sign-in
kingslyj · x · 2026-11-04
Researcher AlexAltea details how leaked eMudhra keys undermine Android Factory Reset Protection: injecting mm.setContentFilters into server JS responses via mitmproxy bypasses the setup wizard, then flipping systemserver's mFrpActive with any N-day leaks the secret and wipes FRP. Demo released, full chain kept private.
More from Safety
- Theorem builds formally verified agent sandbox, proving at machine-code level guests can't touch host files — ChrSzegedy · 2026-11-04
- Opsec runs a fleet of parallel AI security agents that find exploits and auto-open fix PRs — AccBalanced · 2026-11-04
- India's CERT-In gets access to Anthropic's Claude to test cybersecurity vulnerabilities — kingslyj · 2026-11-04
- ARTEX red team tool's Docker image found to contain an unauthorized backdoor — Kyrannio · 2026-11-04
- Ternary Logic proposal: enforcing AI safety at the architecture level — MoralLogs · 2026-11-04
- Cambridge's David Krueger: A global AI pause needs coordination, not trust — DavidSKrueger · 2026-11-04