The installer as designed was able to download code and execute it - so there wa... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

scarface74 on Oct 6, 2019 | parent | context | favorite | on: Google, Xiaomi, and Huawei affected by zero-day fl...

The installer as designed was able to download code and execute it - so there was obviously a way to do it on Android.

lern_too_spel on Oct 7, 2019 [–]

> The installer as designed was able to download code and execute it

No, it was able to download code and ask a Samsung app store system app to install it. This doesn't work on non-Samsung Android devices, and the exact same confused deputy problem can exist on iOS.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact