4 ms·
Really curious, why treat these automation capabilities as a vulnerability? Several security popups appeared, a cable was attached, an application executed on t
by cabaalis 8y ago
Really curious, why treat these automation capabilities as a vulnerability? Several security popups appeared, a cable was attached, an application executed on the computer... as a user I'd much rather have the possibility in the future of automating my phone's UI than to have vendors treat this as a vulnerability and patch.
Edit: Just realized that the commands bypassed the prompts. That is a different beast. But the question still remains.
- userbinator 8y agoI found it somewhat amusing that they mentioned model, manufacturer, IMEI and serial as being a "sensitive information leak" --- if you're in physical possession of the phone, those things can be found without even turning it on.
- fmj 8y agoIt doesn't require an attacker to have physical possession of the phone. They just need you to plug your phone into one of their USB ports. Something like a public charging station would be perfect for this. An IMEI and serial are still unique identifiers that can be used for tracking.