logoalt Hacker News

Borealid • today at 2:11 PM • 2 replies • view on HN

If the device is "insecure", doesn't that mean you - as a user - can exploit one of those insecurities to "mess with" the device without system integrity being aware?

Or are you saying the device is insecure BUT has no local privilege escalations you can take advantage of as a user?


Replies

hedora • today at 3:11 PM

It means the spyware information flow and Google's ability to remotely modify the device have not been disabled.

Muromec • today at 2:39 PM

It could have RCE but not privilige escalation. But I don't buy it, because 5 years without kernel patches is at least 5 escalation exploits being written by the an llm in 5 minutes