Re: [Full-disclosure] The Android Superuser App

2012-08-17 Thread David Black
On 13 August 2012 05:47, Jann Horn wrote: > Hello, > on Android, everyone who wants to give apps root access to his phone uses the > Superuser application by ChainsDD. However, from a security perspective, that > might be a somewhat bad idea. > > First, it's not really Open Source anymore, so you

Re: [Full-disclosure] The Android Superuser App

2012-08-15 Thread Alexander Pruss
There is also SuperSU from XDA's Chainfire: http://forum.xda-developers.com/showthread.php?t=1538053 I think it's closed source, right? -- Alexander R. Pruss arpr...@gmail.com ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/f

Re: [Full-disclosure] The Android Superuser App

2012-08-13 Thread Benji
Ok. On Mon, Aug 13, 2012 at 2:28 PM, Jann Horn wrote: > On Sun, Aug 12, 2012 at 09:47:57PM +0200, Jann Horn wrote: >> And finally, I've found another vuln that essentially lets apps gain root >> rights without asking the user, and I will release all details about it in >> two weeks. > > Found ano

Re: [Full-disclosure] The Android Superuser App

2012-08-13 Thread Jann Horn
On Sun, Aug 12, 2012 at 09:47:57PM +0200, Jann Horn wrote: > And finally, I've found another vuln that essentially lets apps gain root > rights without asking the user, and I will release all details about it in > two weeks. Found another independent vuln that also gives all apps root access, deta

[Full-disclosure] The Android Superuser App

2012-08-13 Thread Jann Horn
Hello, on Android, everyone who wants to give apps root access to his phone uses the Superuser application by ChainsDD. However, from a security perspective, that might be a somewhat bad idea. First, it's not really Open Source anymore, so you can't easily check whether everything works the way it