Introducing Netflix Stethoscope

Re:Introducing Netflix Stethoscope by chipperyman573 on Tuesday February 21, 2017 @06:21PM (#13701175)

>Build an app that some user wants - maybe a game. Make the user click a "Start" button to play. Time how long between presenting the button and receiving the click, after a few rounds of this, wait a fraction of a second less than the average time and trigger the sudo call which in turn usually triggers an allow/deny popup.

I would consider this a software fault. Your SuperSU-or-equivalent app should do something similar to what Firefox does for downloads (the button is greyed out for a few seconds before you can click it).

[ Parent | on HN ]

Re:Introducing Netflix Stethoscope by kiallmacinnes on Tuesday February 21, 2017 @06:26PM (#13701227)

Absolutely, 100% agree. I'd go further, and require a password or pin too.

But - they don't currently do this, and there's no way that I can think of to reliably, as a third party, validate SuperSU etc is actually doing this.

EDIT: Also, some users really are.. ill informed and gullible. I hate saying it, but a large number of employees even at a tech company will click accept after a quick popup that says "For best 3D performance, we need root access to use your phones graphics chip directly".

[ Parent | on HN ]