|
|
Log in / Subscribe / Register

Not just an Android vulnerability? Also, related to 0.0.0.0 Day?

Not just an Android vulnerability? Also, related to 0.0.0.0 Day?

Posted Jun 12, 2025 9:52 UTC (Thu) by grawity (subscriber, #80596)
In reply to: Not just an Android vulnerability? Also, related to 0.0.0.0 Day? by KJ7RRV
Parent article: Covert web-to-app tracking via localhost on Android

> This doesn't seem to just be an Android vulnerability; wouldn't the same exploit concept work on any OS that allows application software to listen on ports?

As I understand it – it would, but... most desktop platforms don't have that kind of application software installed (nor is such software *available* at all, when it comes to the usual suspects – when was the last time a "Facebook" desktop app existed for Windows? probably in Win8 UWP era?), unlike mobile platforms where having such software is "normal" and commonplace.

> Also, this seems to be somewhat related to the 0.0.0.0 Day

"the 0.0.0.0 Day"? ...I'm sorry, but that sounds like such a grandiose name for what seems like a very regular vulnerability. It definitely beats "Meltdown" by a mile. What will come next? "git checkout master of Disaster"? "Ultra LaserJet"? "Segfault of Doctor Doom"?


to post comments

Not just an Android vulnerability? Also, related to 0.0.0.0 Day?

Posted Jun 12, 2025 11:48 UTC (Thu) by rschroev (subscriber, #4164) [Link]

> when was the last time a "Facebook" desktop app existed for Windows

WhatsApp (which is also Meta) has an app. It's supposed goal is to enable/improve calls and screen sharing on your desktop, but it wouldn't totally surprise me to learn they also use it for exploits like this.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds