News for hackers. Stuff that matters.
Re:Show HN: Android 'root' phones via dirtyc0w exploit by voltagex_ on Thursday October 27, 2016 @01:16AM (#12803074)
A (somewhat cringeworthy) thread on how to gain persistence via this exploit is at https://github.com/timwr/CVE-2016-5195/issues/9

I think this would be a "temporary root", rather than something like CF-AutoRoot that gains persistence by modifying the system itself.

Re:Show HN: Android 'root' phones via dirtyc0w exploit by cyphar on Thursday October 27, 2016 @02:02AM (#12803200)
It's painful to read. Only one person in that thread appears to know what SELinux actually does, and nobody has mentioned the fact that SELinux was explicitly designed to make a root privesc contained.

The ironic part is that since DirtyCOW is a kernel bug they could probably modify the exploit to disable SELinux from inside the kernel (or load a module that disables SELinux). But they're just trying to use the PoC as the only thing you can get from the exploit.

Re:Show HN: Android 'root' phones via dirtyc0w exploit by digi_owl on Thursday October 27, 2016 @09:31AM (#12804949)
Welcome to the world of phone firmware modding.

I suspect you got much the same back in the microcomputer era. Just look at the various phreaker stuff salvaged from BBSs.

Re:Show HN: Android 'root' phones via dirtyc0w exploit by daveloyall on Thursday October 27, 2016 @02:49PM (#12808223)
Well at least these github repos and gists are an improvement beyond "here, download this .apk from megaupload and install it!"