4 ms·
doesn't sound very secure seeing all those processes running under root...
by alliao 6y ago
doesn't sound very secure seeing all those processes running under root...
- dtx1 6y agoWhat difference does it make if it's just serving static HTML?
- d1sxeyes 6y agoWell none, but if it's the hardware responsible for managing your wireless connectivity on your mobile phone, you might not be happy about the possibility of that being compromised.
- megous 6y agoOriginal firmware is full of security issues. Things like effectively running `system("something %s", some string input from AT command)` under root, etc. Originally I wanted to get access to the FW via one of these issues, but then I found the adb unlock, and it's way easier. All it took me to crack their ADB protection was to extract and disassemble their atfwd_daemon from firmware update package, and look for interestingly named commands and reverse their algorithm for generating the unlock key. You can see for yourself how "complicated" it is: https://xnux.eu/devices/feature/qadbkey-unlock.c https://xnux.eu/devices/feature/qadbkey-unlock.c And that was it. They also allow to run code under root downloaded from the net via special push SMS, etc. Thankfully not enabled by default. But bleh.