3 ms·
Android is notoriously broken among the AppSec community. For proof all you have to do is look at the last 90 days of Android bug reports[1]. The reason why you
by fnkym0nky 10y ago
Android is notoriously broken among the AppSec community. For proof all you have to do is look at the last 90 days of Android bug reports[1]. The reason why your not hearing of exploits is because of the price war that currently exists for them. Zerodium recently raised the price for a Android RCE to $200,000, with iPhone RCEs at 1.5 million[2].
[1] https://source.android.com/security/bulletin/2016-10-01.html https://source.android.com/security/bulletin/2016-10-01.html
[2] https://www.zerodium.com/program.html https://www.zerodium.com/program.html
- pjmlp 10y agoAfter watching the presentations about the state of the union in regards to kernel security in Android, I came to realize that I was wrong in bashing Google for their constrained NDK. Actually, they should constrain it even more, given the poor state of kernel exploits and how the whole security updates doesn't happen across Android devices.