News for hackers. Stuff that matters.

A comment on Google, Xiaomi, and Huawei affected by zero-day flaw that unlocks root access. Parent comment

Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by telanis on Saturday October 05, 2019 @09:27PM (#21169208)
GRSec is the primary reason the Android devices from BlackBerry have never, to my knowledge, been rooted (despite their many flaws). It's crazy that it's not more accepted.
[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by dmix on Saturday October 05, 2019 @09:42PM (#21169274)
I personally wouldn't trust a company that openly bragged it built a system to provide local police and Intel agencies with real time access to Blackberry messaging flowing across an entire city in 2010 for G20. In addition to sharing their "master" encryption key for a number of years:

https://www.theverge.com/2016/4/14/11434926/blackberry-encry...

Also AFAIK Blackberry only provided a hardened kernel with a single device in 2015 called Priv. I haven't heard anything from them since... maybe someone could correct me here.

[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by westmeal on Saturday October 05, 2019 @11:17PM (#21169611)
The new Android devices also have hardened kernels but it doesn't really matter phones are insecure as fuck in other ways.
[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by justinjlynn on Sunday October 06, 2019 @04:03AM (#21170518)
Indeed. Who the hell thought it was a great idea for the modem baseband device to have unlimited direct memory access to the host processor memory space? I mean, especially when the baseband firmware can usually be remotely updated by the network with zero user interaction?!
[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by posix_me_less on Sunday October 06, 2019 @05:32AM (#21170866)
> have unlimited direct memory access to the host processor memory space

Can you give some reference for that claim?

[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by jsjohnst on Sunday October 06, 2019 @08:08AM (#21171526)
https://www.usenix.org/system/files/conference/woot12/woot12...

If you want more, literally google “baseband attack host processor memory” or “baseband exploits DMA” or “baseband exploits memory”.

[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by diroussel on Sunday October 06, 2019 @08:49AM (#21171715)
Is this all Android? Or just Blackberry?
[ Parent | on HN ]