I'm impressed by how quick you replied, thanks for that.
I didn't see anything that looked like an exploit to me while looking through the jailbreak contents, so I automatically assumed that it was a "legitimate update" (signed by a legitimate private key).
But that also means that the statement
Quote:
(you don't need to jailbreak or launchpad to use usb networking)
|
on
the wiki is incorrect, right?
By the way, the first time I saw the RSA key was in yifanlu's repo (nothing personal, just the first result in my search engine), which was before nettle. But since there was no public key in the code I didn't see how it was related to the pubhackkey (and apparently OpenSSL doesn't implement PGP, so I couldn't verify using gpg).