Hey y'all!
I recently received an EVO Nano+ and my curiosity has gotten the best of me with wanting to know what makes this thing tick. After finding the zip files containing the updates I started digging and discovered that some of the files contained in the zip are Android system updates.
The binaries for both AIR (drone?) and GROUND (controller) are both Android images from what I've found
One thing I discovered that might be worrisome is that these images appear to be signed with AOSP (Android Open Source Project) test keys.
These keys are openly available, meaning anyone could theoretically create a firmware that either the aircraft or the controller would happily accept. I'll need to verify the certs in the update with those in AOSP to know for sure if this is indeed the case.
UPDATE: I checked the certs and they match
I'm going to keep digging to see what other goodies I might find in these files
.
I recently received an EVO Nano+ and my curiosity has gotten the best of me with wanting to know what makes this thing tick. After finding the zip files containing the updates I started digging and discovered that some of the files contained in the zip are Android system updates.
The binaries for both AIR (drone?) and GROUND (controller) are both Android images from what I've found
One thing I discovered that might be worrisome is that these images appear to be signed with AOSP (Android Open Source Project) test keys.
These keys are openly available, meaning anyone could theoretically create a firmware that either the aircraft or the controller would happily accept. I'll need to verify the certs in the update with those in AOSP to know for sure if this is indeed the case.
UPDATE: I checked the certs and they match
I'm going to keep digging to see what other goodies I might find in these files
.
