trustlook

3 ms·

1. 1.▲
   by trustlook 12y ago

   That reminds me the movie Captain America 2. Use such a USB based OS, enter an Apple store and find a macbook. Literally an untraceable hacking.
2. 2.▲
   by trustlook 12y ago

   Besides AWS, so many SDKs are used client oriented design, like Dropbox and Facebook. The consequence of leaking those keys may not critical as the AWS though.
3. 3.▲
   by trustlook 13y ago

   Correct. Even for the not rooted phones, attackers can send SMS, record audio or access SD card due to the permissions the target app applied. Also you may exploit some privilege escalation vulnerability on Android after you got a shell. It
4. 4.▲
   by trustlook 13y ago

   Thx Zhongjie ;)
5. 5.▲
   by trustlook 13y ago

   LOL, that's what I thought... Well there is a large number of apps also affected by this vulnerability. Some have 50m-100m downloads.
6. 6.▲
   by trustlook 13y ago

   google "addJavascriptInterface vulnerability"
7. 7.▲
   by trustlook 13y ago

   It's a vulnerability on Android Webview component, which supports a "addJavascriptInterface" method. This method allows you to call the Java native method by using a Javascript object inside the webpage. And, there is a trick
8. 8.▲
   by trustlook 13y ago

   Correct ;-)