Live data from Hacker News

Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

blog.trendmicro.com

11–20 of 66 posts

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#12
post #9
post #8

Earlier quoted context omitted.

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

On recent Android versions, permissions are prompted one by one, whenever an API that needs that permission is first called. Each individual permission is prompted for and can individually be denies. I personally consider this an improvement, though I realize many (probably most) users will just click through anyway.

Only for updated apps. Apps written for an older Android API still demand every permission they want at install time.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#13
post #9
post #8

Earlier quoted context omitted.

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

On recent Android versions, permissions are prompted one by one, whenever an API that needs that permission is first called. Each individual permission is prompted for and can individually be denies. I personally consider this an improvement, though I realize many (probably most) users will just click through anyway.

On consumer shops Android 4.4 and 5.1 devices are still the ones being sold on the 100€ price range.

The permissions system was introduced on 6.0.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#14
post #8
post #4

(How) does this bypass the permissions system?

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

Android UI tries very hard to hide the list of permissions being granted.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#15
Why is this being called a backdoor? Is there any indication that that's what it is? Except for the headline, the only claim even remotely as serious made in the article is that it can root some devices, and figuring out which ones is left as an exercise for the reader...

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#16
post #11

Observation: I suppose it's some kind of meme in this industry that in this kind of posts they take screenshots from MS-DOS editors opening the malware.

Just like young men sneaking around and wearing black face masks in stories about "hacking"

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#17

So is the experience: "Hacked Up Pokemon Go needs thse permissions" (all of them) (deny, allow), user has been trained that if they deny a permission the app won't work so they click allow?

I would assume it simply doesn't use the Android 6 permission system, so the user gets no option to deny.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#18
post #8
post #4

(How) does this bypass the permissions system?

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

Well it's not like there's any option to deny them. You can only not install the app, unless the app chooses to build for the Android 6 permission system.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#19
post #8
post #4

(How) does this bypass the permissions system?

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

I mostly have apple devices but have a Nexus 7 at home. I'm not sure which version it's running.

Every time I install something I have a sinking feeling as it asks me to allow it to do things that sound wildly beyond anything I would ever want an app to do. Things like an app for my kids that asks for something along the lines of "access to the files". Hopefully things have improved with the newer OS but man I feel uncomfortable installing apps on Android in a way I've never felt with Apple.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#20
post #16
post #11

Observation: I suppose it's some kind of meme in this industry that in this kind of posts they take screenshots from MS-DOS editors opening the malware.

Just like young men sneaking around and wearing black face masks in stories about "hacking"

You mean this guy https://www.troyhunt.com/is-this-hooded-cyber-bandit-the-web... ?
Post reply on HN