scottyab / rootbeer

Simple to use root checking Android library and sample app
Apache License 2.0
2.42k stars 432 forks source link

Question: checking OTA certificates #140

Open WuglyakBolgoink opened 4 years ago

WuglyakBolgoink commented 4 years ago

Hallo guys,

do you have some information about checking for Over The Air (OTA) certificates?

And why you don't do it?

for example what I plan to do - https://github.com/WuglyakBolgoink/cordova-plugin-iroot/blob/06497315a58d4697777ccd8080c232324734c6a0/src/android/de/cyberkatze/iroot/InternalRootDetection.java#L187-L204

If I understand right, if this certificates file exist, then the device was not rooted. Is it correct?

stealthcopter commented 4 years ago

This looks interesting, it's not something I'm very familiar with but it would look like this is more of an indication of a custom rom, or ones that doesn't support OTA which may lead to false positives as it's not a 100% indication that the device is rooted.