Tag
Android 17 introduces new APIs without releasing them to the Android Open Source Project (AOSP), marking the first such change since Android 3.x.
A security researcher reveals that Honda Civic headunits accept unsigned updates using the publicly-known AOSP test key, enabling an 'evil valet' attack with physical USB access. Tools like ota-builder and apk-rebuilder are released to facilitate further reverse engineering.