Viewing profile — trustlook

That reminds me the movie Captain America 2. Use such a USB based OS, enter an Apple store and find a macbook. Literally an untraceable hacking.

Besides AWS, so many SDKs are used client oriented design, like Dropbox and Facebook. The consequence of leaking those keys may not critical as the AWS though.

Correct. Even for the not rooted phones, attackers can send SMS, record audio or access SD card due to the permissions the target app applied. Also you may exploit some privilege e…

Thx Zhongjie ;)

LOL, that's what I thought... Well there is a large number of apps also affected by this vulnerability. Some have 50m-100m downloads.

google "addJavascriptInterface vulnerability"

It's a vulnerability on Android Webview component, which supports a "addJavascriptInterface" method. This method allows you to call the Java native method by using a Javascript obj…

Correct ;-)