> Because while a privilege escalation is, as you say, not particularly > likely, it wouldn't be necessary if the user could just plug their phone > into a PC and do 'adb shell'!
As hackbod noted in the current SDK the shell exposed through 'adb shell' is running as root. This won't be the case in the 1.0 release. 'adb shell' will run as its own user, and therefore not have access to an application's files. > What I mean is , if the mobile device running android is connected to > PC (or other device) as secondary device (analogous to secondary hard > drive) In this instance, access to the internal storage would still be mediated by Android. The internal storage would not be exposed as a "dumb disk". Any means of accessing the filesystem would require a process on Android and therefore be under the restrictions discussed. Cheers, Justin Android Team @ Google On Jun 11, 8:55 am, David Given <[EMAIL PROTECTED]> wrote: > Justin (Google Employee) wrote: > > [...] > > > "Safe" is vague. Based on hackbod's information it would be nearly > > impossible to gain access to an application's private files. However, > > there are always extraordinary possibilities such as a privilege > > escalation exploit allowing a user or process to gain root or the user > > physically modifying the devices and removing internal storage media. > > Both of these possibilities are extremely remote. > > Is it likely that production phones will have the debug interface? > Because while a privilege escalation is, as you say, not particularly > likely, it wouldn't be necessary if the user could just plug their phone > into a PC and do 'adb shell'! > > -- > David Given > [EMAIL PROTECTED] --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] Announcing the new M5 SDK! http://android-developers.blogspot.com/2008/02/android-sdk-m5-rc14-now-available.html For more options, visit this group at http://groups.google.com/group/android-developers?hl=en -~----------~----~----~----~------~----~------~--~---
