News for hackers. Stuff that matters.

A comment on Google, Xiaomi, and Huawei affected by zero-day flaw that unlocks root access. Parent comment

Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by westmeal on Saturday October 05, 2019 @11:17PM (#21169611)
The new Android devices also have hardened kernels but it doesn't really matter phones are insecure as fuck in other ways.
[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by justinjlynn on Sunday October 06, 2019 @04:03AM (#21170518)
Indeed. Who the hell thought it was a great idea for the modem baseband device to have unlimited direct memory access to the host processor memory space? I mean, especially when the baseband firmware can usually be remotely updated by the network with zero user interaction?!
[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by posix_me_less on Sunday October 06, 2019 @05:32AM (#21170866)
> have unlimited direct memory access to the host processor memory space

Can you give some reference for that claim?

[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by jsjohnst on Sunday October 06, 2019 @08:08AM (#21171526)
https://www.usenix.org/system/files/conference/woot12/woot12...

If you want more, literally google “baseband attack host processor memory” or “baseband exploits DMA” or “baseband exploits memory”.

[ Parent | on HN ]
Re:Google, Xiaomi, and Huawei affected by zero-day flaw that... by diroussel on Sunday October 06, 2019 @08:49AM (#21171715)
Is this all Android? Or just Blackberry?
[ Parent | on HN ]