3 ms·
TL;DR: some guys bought a bunch of WebKit zero-days, gained root on an Android 2.x device, installed a surveillance app and demoed it at RSA conf. It would be
by ge0rg 15y ago
TL;DR: some guys bought a bunch of WebKit zero-days, gained root on an Android 2.x device, installed a surveillance app and demoed it at RSA conf.
It would be nice to get hold of some more of the technical details involved.
- jacquesm 15y agoIt would have been nicer still if they had helped to patch the holes in WebKit after showing their demo.
- mikeash 15y agoGiven the ancient versions of Android they're exploiting, it wouldn't surprise me if the holes were already fixed.
- jacquesm 15y agoIt'd be pretty silly to classify these as 0-day exploits that they paid for then!
- mikeash 15y agoI suppose so. The article does say "The attackers spent $1,400 on the black market for the details of 14 known, but not patched, bugs in WebKit." Yet it also explicitly mentions specific, old versions of Android which have the holes. This seems like something of a contradiction.