Re:Remote code execution on Android devices
by wzdd on Friday August 08, 2014 @07:29AM
(#8152306)
In terms of impact right now, the app permissions thing is a much bigger problem, yes. People get scammed by apps every day, whereas this doesn't appear to be being exploited in the wild at all.
[ Parent
| on HN ]
That is not the point. Both are very serious issues. But one is a usability+curation problem, and this is an unpatched security exploit. Combining the discussion on these things in this thread is confusing and unhelpful to both issues.
Re:Remote code execution on Android devices
by localhorse on Friday August 08, 2014 @09:23PM
(#8155937)
The biggest different is that (to some extent) this vulnerability requires no user intervention (at least not in an active capacity), whereas the app permissions issue is one where the user has actively chosen to accept something.