| |||||||||||||
2 weeks isn't completely unreasonable.2 weeks isn't completely unreasonable.Posted Nov 6, 2008 14:16 UTC (Thu) by jimparis (subscriber, #38647)In reply to: 2 weeks isn't completely unreasonable. by alex Parent article: Android's first vulnerability
A development tool would be a setuid telnetd binary, not a magic telnetd binary that grants euid=0 without being setuid.
Someone from Google has mentioned to me via IRC that it's definitely not intentional. I still haven't managed to track down the cause though.
(Log in to post comments)
2 weeks isn't completely unreasonable. Posted Nov 6, 2008 16:21 UTC (Thu) by jimparis (subscriber, #38647) [Link] Nevermind, I found it -- init spawns a root shell on /dev/console that picks up all keyboard input. Hilarious!http://android.jim.sh/index.php/ConsoleShell
|
|||||||||||||