Thanks alot Justin, it was helpful

Sincerely
Ray

On Jun 11, 7:13 pm, "Justin (Google Employee)" <[EMAIL PROTECTED]>
wrote:
> > Because while a privilege escalation is, as you say, not particularly
> > likely, it wouldn't be necessary if the user could just plug their phone
> > into a PC and do 'adb shell'!
>
> As hackbod noted in the current SDK the shell exposed through 'adb
> shell' is running as root. This won't be the case in the 1.0 release.
> 'adb shell' will run as its own user, and therefore not have access to
> an application's files.
>
> > What I mean is , if the mobile device running android is connected to
> > PC (or other device) as secondary device (analogous to secondary hard
> > drive)
>
> In this instance, access to the internal storage would still be
> mediated by Android. The internal storage would not be exposed as a
> "dumb disk". Any means of accessing the filesystem would require a
> process on Android and therefore be under the restrictions discussed.
>
> Cheers,
> Justin
> Android Team @ Google
>
> On Jun 11, 8:55 am, David Given <[EMAIL PROTECTED]> wrote:
>
> > Justin (Google Employee) wrote:
>
> > [...]
>
> > > "Safe" is vague. Based on hackbod's information it would be nearly
> > > impossible to gain access to an application's private files. However,
> > > there are always extraordinary possibilities such as a privilege
> > > escalation exploit allowing a user or process to gain root or the user
> > > physically modifying the devices and removing internal storage media.
> > > Both of these possibilities are extremely remote.
>
> > Is it likely that production phones will have the debug interface?
> > Because while a privilege escalation is, as you say, not particularly
> > likely, it wouldn't be necessary if the user could just plug their phone
> > into a PC and do 'adb shell'!
>
> > --
> > David Given
> > [EMAIL PROTECTED]
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[EMAIL PROTECTED]
Announcing the new M5 SDK!
http://android-developers.blogspot.com/2008/02/android-sdk-m5-rc14-now-available.html
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to