[abritishguy]

It's not impossible, large carriers are still using DES to sign the OTA updates. Using rainbow tables you can crack the key and install an app which can break out of the sandbox and read the ki and IMSI.

[rasz_pl]

That flaw was discovered in 2013.

[abritishguy]

And is still applicable today...

[rasz_pl]

and would be in 2010 ..if you had a time machine