Android Enthusiast
May 16, 2010
i've had my Nexus 7 since launch month, and rooted it immediately. i took the plunge yesterday to unroot and return to stock using this guide:

because of this, i have no idea how updates are applied to the device. :p
(since i've always just flashed a custom ROM)

so i'm on 4.2.2, but according to the Bluebox Security Scanner, my device is still affected by the "MasterKey" exploit.

i originally came from CM 10.1.2, that had patched the exploit, but i coulda sworn Google patched this as well.

am i missing a step or something?
You can check in settings to see if you have an update, I think it's settings>about>software update.

As far as I know, google patched the issue in the app store. Meaning nothing can get in the app store with the security hole. I don't know if google has updated the stock ROMs for the nexus line with the security patch.
oh ok, so it was patched on their end, not from the device end?

i tried the Settings > About > Updates, and that said "no updates found".

just assumed it was from the device end since CM had a specific release just for the exploit.
The patch on their end is only to help with downloads from the play store. Once the patch is applied at the os level in 4.3, it will also help protect when using 3rd party markets like the amazon app store and what not.
  • Like
Reactions: mrhomiec
that explains everything!

that's what i get for assuming. i thought since CM had a patched version, that source code (or an OTA update) was released.

thanks much!