Re:“Freedom Phone” is an overpriced smartphone that doesn’t ...
by Arnt on Friday July 16, 2021 @11:35AM
(#27857369)
That's probably MediaTek, not at all to be confused from the Lavian router vendor MikroTik.
I'm somewhat confused by this emphasis on CPU vulnerabilities. The browsers we run are now ten, twenty million lines of code, and those lines of code are very close to most people's payload. If you want to attack someone, the payload you're looking for is quite likely to be readable for the browser and other apps. It seems much easier to get something into the code of an app the user runs by exploiting some code in maven/npn/rubygems/… than via the CPU.
I'm somewhat confused by this emphasis on CPU vulnerabilities. The browsers we run are now ten, twenty million lines of code, and those lines of code are very close to most people's payload. If you want to attack someone, the payload you're looking for is quite likely to be readable for the browser and other apps. It seems much easier to get something into the code of an app the user runs by exploiting some code in maven/npn/rubygems/… than via the CPU.