[viper]

Keys for Motorola Phones’ Bootloader Finally Hacked! @ http://www.xda-developers.com/androi...inally-hacked/

This one’s still trickling in, but it appears that the keys needed to bypass the bootloader protection used by Motorola have been uncovered. William Pitcock-otherwise known as @nenolod- posted the private key used by Motorola to sign all the images along with a few other useful strings that will allow developers to create valid signed updates that can get past the boot loader, including custom ROMs and recoveries.

So, what devices does today’s leak affect? We know for a fact that it works on the Milestone and Droid. Devices that are suspected to be signed by the same key are: Droid 2, Droid X, Charm, and possibly others. Unless Motorola changed the encryption key in OTA updates and newer devices released after William reported the issue in December, they should still remain vulnerable. And even if Motorola did change the keys, there is a good chance the same vulnerability was never closed, which would allow such keys to be reverse engineered on a per-device basis.

William passed all the necessary information to the group called @FreeMyMoto, who will be exploring all the options and hopefully providing further details about each of the devices in question. Stay tuned for more information.