5 ms·

Okay, so the app's running. Except the app is remote-controlled by a malicious “display driver” that waits for the user to do all this authentication set-up, t

Okay, so the app's running. Except the app is remote-controlled by a malicious “display driver” that waits for the user to do all this authentication set-up, transfers the money away, “are you sure”s it, then prevents the user from seeing any of the on-phone scam warnings until it's too late to reverse the transaction.

the8472 5y ago
Display driver is part of the kernel, which is part of the trust chain.
- wizzwizz4 5y ago
  Substitute “display driver” for a draw over other apps, “tap this dot” game, then.
  - the8472 5y ago
    That's a standard feature and not related to unlocking the bootloader. Handling that properly wrt. sensitive apps has to be done anyway.