4 ms·
Pulling this attack off requires enough access to the machine to either run the unprivileged commands needed to create the exploit condition or to upload a bina
by McGlockenshire 5y ago
Pulling this attack off requires enough access to the machine to either run the unprivileged commands needed to create the exploit condition or to upload a binary/script that runs unprivileged that in turn creates the exploit condition.
If the attacker already has that level of unauthorized access, you're already doomed.
- tptacek 5y agoAttacks like this break multitenant computing environments. It's not a threat to your desktop computer or your phone. But it can be a very big deal for hosting environments. It also breaks sandboxing. To whatever extent you're trying to run programs that are somehow jailed, so you can download and run them without worrying about them taking over your system, kernel LPEs break those assurances.
- samus 5y agoAndroid also uses user accounts (one per app) to enforce its security model. Is that what you refer to with sandboxing?