diff --git a/know-how/hardware/blackberry-keyone/_posts/2017-11-30-bb-keyone-variants-ota-matrix.md b/know-how/hardware/blackberry-keyone/_posts/2017-11-30-bb-keyone-variants-ota-matrix.md
deleted file mode 100755
index 10c7a1d..0000000
--- a/know-how/hardware/blackberry-keyone/_posts/2017-11-30-bb-keyone-variants-ota-matrix.md
+++ /dev/null
@@ -1,115 +0,0 @@
----
-title: BlackBerry KEYone variant's OTA updates
-layout: default
-language: en
-created: 2017-09-17 20:35:18 +0200
-updated: 2017-11-30 14:53:59 +0100
-toc: false
-tags:
- - know-how
- - hardware
- - blackberry
- - keyone
- - ota
- - updates
- - firmware
----
-
-Note that firmwares are only compatible between the same model. So when trying to update a device
-from version `AAL093`, make sure to emulate the correct model. If you have the BBB100-1, you have
-to use `PRD-63116-001`. If you have the BBB100-2, use `PRD-63117-003`.
-
-For other BBB100 models, make sure the 5 digits in the middle of the PRD number match.
-
-However, since the OTA updates check the device before installing, there should be no risk of
-bricking your device should you manage to download the wrong update.
-
-
-
-BBB100-1 (PRD-63116) firmwares
-==============================
-
-| PRD-63116-001 | | AAL093 | | | AAL964 | | | | AAN355 | | AAN517 | | AAO472 | | | AAP683 | AAQ302 | |
-| PRD-63116-003 | AAK399 | | AAL483 | | | | AAM625 | | | | AAN517 | | AAO472 | | | | AAQ302 | |
-| PRD-63116-005 | AAK399 | | AAL483 | | | | AAM625 | | | | AAN517 | | AAO472 | | | | AAQ302 | |
-| PRD-63116-007 | AAK399 | | AAL483 | | | | AAM625 | | | | | | AAO472 | | | | AAQ302 | |
-| PRD-63116-009 | | | | AAL619 | | AAM481 | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-010 | | | | AAL619 | | AAM481 | | | | AAN358 | | | | | | | | |
-| PRD-63116-013 | | | | AAL619 | | AAM481 | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-017 | | | | | | AAM481 | | | | | | | AAO472 | | AAP638 | | AAQ302 | AAQ837 |
-| PRD-63116-020 | | | | | | AAM481 | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-021 | | | | AAL619 | | AAM481 | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-023 | | | | | | AAM481 | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-024 | | | | | | AAM481 | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-027 | | | | | | | | AAN057 | | | | | AAO472 | | AAP638 | | | |
-| PRD-63116-029 | | | | | | | | | | | | | | | | | AAQ302 | AAQ837 |
-| PRD-63116-033 | | | | | | AAM481 | | | | | | | AAO472 | | AAP638 | | AAQ302 | AAQ837 |
-| PRD-63116-036 | | | | | | | | | | | | AAN596 | | AAO750 | | | | |
-| PRD-63116-039 | | | | | | | | | | | | | | | | | AAQ302 | |
-| PRD-63116-040 | | | | | | | | | | | | | | | | | AAQ302 | |
-| PRD-63116-041 | | | | | | | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-042 | | | | | | | | | | AAN358 | | | AAO472 | | | | AAQ302 | AAQ837 |
-| PRD-63116-043 | | | | | | | | | | | | | | | | | AAQ302 | AAQ837 |
-| PRD-63116-044 | | | | | | | | | | | | | | | | | AAQ302 | AAQ837 |
-| PRD-63116-047 | | | | | | | | | | | | | | | | | AAQ302 | AAQ837 |
-| PRD-63116-051 | | | | | | | | | | | | | | | | | AAQ302 | |
-{: .freeze-first-col}
-
-* PRD-63116-036 is the AT&T variant which gets its updates from AT&T's servers
-* PRD-63116-039 and onwards is the Black KEYone.
-
-
-BBB100-2 (PRD-63117) firmwares
-==============================
-
-| PRD-63117-003 | AAK624 | AAK879 | AAL093 | AAL682 | AAM481 | | AAO472 | | AAQ302 | |
-| PRD-63117-011 | AAK624 | AAK879 | | AAL682 | AAM481 | AAN358 | AAO472 | AAP638 | AAQ302 | |
-| PRD-63117-015 | | AAK879 | | AAL682 | AAM481 | AAN358 | AAO472 | AAP638 | AAQ302 | |
-| PRD-63117-017 | | | | | | AAN358 | | | | |
-| PRD-63117-019 | | | | | AAM481 | AAN358 | AAO472 | AAP638 | | AAQ837 |
-| PRD-63117-021 | | | | | | | AAO472 | | | AAQ837 |
-| PRD-63117-023 | | AAK879 | | | AAM481 | AAN358 | AAO472 | | AAQ302 | |
-| PRD-63117-025 | | | | AAL682 | | AAN358 | AAO472 | | AAQ302 | |
-| PRD-63117-027 | | AAK879 | | | AAM481 | AAN358 | AAO472 | | | AAQ837 |
-| PRD-63117-028 | | AAK879 | | | AAM481 | AAN358 | AAO472 | | | AAQ837 |
-| PRD-63117-029 | | | | AAL682 | AAM481 | AAN358 | AAO472 | AAP638 | AAQ302 | |
-| PRD-63117-034 | | | | | | AAN358 | AAO472 | AAP638 | AAQ302 | AAQ837 |
-| PRD-63117-035 | | | | | | AAN358 | AAO472 | | AAQ302 | |
-| PRD-63117-036 | | | | | | AAN358 | AAO472 | | AAQ302 | |
-| PRD-63117-037 | | | | | | AAN358 | AAO472 | | | AAQ837 |
-| PRD-63117-039 | | | | | | AAN358 | AAO472 | | AAQ302 | |
-| PRD-63117-040 | | | | | | AAN358 | AAO472 | | AAQ302 | |
-| PRD-63117-041 | | AAK879 | | | AAM481 | AAN358 | AAO472 | | AAQ302 | |
-| PRD-63117-042 | | | | | | AAN358 | AAO472 | | | AAQ837 |
-| PRD-63117-044 | | | | | | | | AAP638 | | AAQ837 |
-{: .freeze-first-col}
-
-
-Other KEYone firmwares
-======================
-
-| PRD-63118-001 | AAL093 | | | | | | | | | AAO472 | | | | AAP638 | | AAQ302 | | |
-| PRD-63118-003 | | | AAM286 | | | | | AAN982 | | | | AAP494 | | | | | | |
-| PRD-63734-001 | | | | | | AAM999 | | | AAO273 | AAO472 | | | AAP553 | | AAQ264 | | | AAQ915 |
-| PRD-63734-002 | | | | | | AAM999 | | | AAO273 | AAO472 | | | AAP553 | | AAQ264 | | | AAQ915 |
-| PRD-63763-001 | | AAL964 | | AAM625 | | | AAN358 | | | AAO472 | | | | AAP638 | | | AAQ837 | |
-| PRD-63763-002 | | | | | | | | | | AAO472 | | | | AAP638 | | | AAQ837 | |
-| PRD-63764-001 | | | | | AAM693 | | AAN358 | | | | AAO548 | | | AAP638 | | | AAQ837 | |
-{: .freeze-first-col}
-
-* `AAK199` --- pre-release version for pre-relase devices
-* `AAK831`, `AAL655` --- no OTA, use an Autoloader if available
-
-
-BBD100 (Motion) firmwares
-=========================
-
-| PRD-63737-003 | | AAQ091 | | AAQ667 |
-| PRD-63737-007 | | AAQ091 | | AAQ667 |
-| PRD-63737-009 | | AAQ091 | | AAQ667 |
-| PRD-63739-009 | AAP794 | | | AAQ667 |
-| PRD-63739-010 | AAP794 | | | AAQ667 |
-| PRD-63753-002 | | | AAQ236 | AAQ667 |
-| PRD-63753-003 | | | AAQ236 | AAQ667 |
-{: .freeze-first-col}
-
diff --git a/know-how/hardware/blackberry-keyone/_posts/2017-09-17-bb-keyone-ota-updates-for-different-variants.md b/know-how/hardware/blackberry-keyone/_posts/2017-12-07-bb-keyone-ota-updates-for-different-variants.md
similarity index 87%
rename from know-how/hardware/blackberry-keyone/_posts/2017-09-17-bb-keyone-ota-updates-for-different-variants.md
rename to know-how/hardware/blackberry-keyone/_posts/2017-12-07-bb-keyone-ota-updates-for-different-variants.md
index d7cc78a..22f9486 100644
--- a/know-how/hardware/blackberry-keyone/_posts/2017-09-17-bb-keyone-ota-updates-for-different-variants.md
+++ b/know-how/hardware/blackberry-keyone/_posts/2017-12-07-bb-keyone-ota-updates-for-different-variants.md
@@ -3,7 +3,7 @@ title: BlackBerry KEYone OTA updates for different variants
layout: default
language: en
created: 2017-09-15 20:32:10 +0200
-updated: 2017-09-17 20:49:36 +0200
+updated: 2017-12-17 00:19:07 +0100
toc: false
tags:
- know-how
@@ -14,6 +14,15 @@ tags:
- updates
- firmware
---
+
+BlackBerry/TCL has disabled the described method of gaining access to the advanced features of the
+Updates app in the firmware versions of October 2017 and later. However, there's a way to still get
+access using the [Janus vulnerability](http://www.androidpolice.com/2017/12/08/janus-vulnerability-allows-attackers-modify-apks-without-changing-signature-apkmirror-already-protected/)
+and installing an older or patched version of the updater. But this, too, will be gone after the
+December 2017 update.
+
+
+
Variants and update situation
=============================
@@ -132,7 +141,7 @@ which I rewrote and improved. My version can be found here:
-For convenience, I put up a matrix [here]({% post_url 2017-11-30-bb-keyone-variants-ota-matrix %}).
+For convenience, I put up a matrix [here](https://tclota.birth-online.de/).
Let's say we have a UK BBB100-2. The PRD would be PRD-63117-003 and as of September 2017, we'd run
firmware version `AAM481`. However, that's the July patch, not the September patch.
@@ -143,6 +152,17 @@ version `AAM481`. So we have to get our device to `AAN358` first to be able to p
`AAO472`. For that, we can use any variant that has our current version `AAM481` and `AAN358`, e.g.
`PRD-63117-011`.
+
+Note that firmwares are only compatible between the same model. So when trying to update a device
+from version `AAL093`, make sure to emulate the correct model. If you have the BBB100-1, you have
+to use `PRD-63116-001`. If you have the BBB100-2, use `PRD-63117-003`.
+
+For other BBB100 models, make sure the 5 digits in the middle of the PRD number match.
+
+However, since the OTA updates check the device before installing, there should be no risk of
+bricking your device should you manage to download the wrong update.
+
+
Doing the actual update
=======================
@@ -166,7 +186,7 @@ Your phone will reboot and install the update. It'll boot up to the new version.
In the case of the `PRD-63117-003` variant and assuming a time of mid-September 2017, the just
installed `AAN358` isn't the latest version for this model. There's a newer `AAO472` version
-available as you can see from the [matrix]({% post_url 2017-11-30-bb-keyone-variants-ota-matrix %}).
+available as you can see from the [matrix](https://tclota.birth-online.de/).
But only the variant `PRD-63117-034` is currently getting the OTA update to `AAO472`. Enter that
into the *Emulated CU Reference* field in the *Updates* app, change the *Emulated current version*
to the just installed `AAN358` and tap START TEST again. It'll show the second update