News for hackers. Stuff that matters.

A comment on Major Flaw in Android Phones Would Let Hackers in with Just a Text. Parent comment

Re:Major Flaw in Android Phones Would Let Hackers in with Ju... by aswanson on Monday July 27, 2015 @09:54PM (#9959096)
decode video with libstagefright, which is a C++ library with vulnerabilities and insufficient sandboxing

Why? Why, if it is known to be a poorly written library, is it still part of an official release? And why the hell are client messages allow to specify the level of media down to the library linkage? Wtf.

[ Parent | on HN ]
Re:Major Flaw in Android Phones Would Let Hackers in with Ju... by serge2k on Tuesday July 28, 2015 @01:56AM (#9959746)
The app is probably using MediaPlayer/MediaCodec and that uses stagefright under the covers.

The author is trying to build up hype for their vulnerability. Maybe if they shit on stagefright enough they can even start selling t-shirts.

[ Parent | on HN ]