Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

blog.trendmicro.com

Post reply on HN
Print view View original

21–30 of 66 posts

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#21

Post by kbart »

ClassyJacket wrote: post #18
kbart wrote: post #8

Earlier quoted context omitted.

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

Well it's not like there's any option to deny them. You can only not install the app, unless the app chooses to build for the Android 6 permission system.

"You can only not install the app"

That's what I actually do. I refuse to install apps that require broad permissions not related to their primary purpose. Though I do realize that I belong to that insignificant minority group of users.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#22

Post by kbart »

mrkrabo wrote: post #11

Observation: I suppose it's some kind of meme in this industry that in this kind of posts they take screenshots from MS-DOS editors opening the malware.

That's Hiew[0], a popular hex editor for Windows. These screenshots looks legitimate.

0. http://www.hiew.ru

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#23

Post by _ao789 »

teniutza wrote: post #20
grecy wrote: post #16

Earlier quoted context omitted.

Just like young men sneaking around and wearing black face masks in stories about "hacking"

You mean this guy https://www.troyhunt.com/is-this-hooded-cyber-bandit-the-web... ?

Best article ever :D

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#24

Post by grecy »

teniutza wrote: post #20
grecy wrote: post #16

Earlier quoted context omitted.

Just like young men sneaking around and wearing black face masks in stories about "hacking"

You mean this guy https://www.troyhunt.com/is-this-hooded-cyber-bandit-the-web... ?

I was think worse, like this:

http://cdn.wccftech.com/wp-content/uploads/2017/03/icloud-sc...

http://www.jordantimes.com/sites/default/files/styles/news_i...

etc

Usually show men in black clothes trying to climb in windows, etc.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#26

Post by StavrosK »

ClassyJacket wrote: post #18
kbart wrote: post #8

Earlier quoted context omitted.

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

Well it's not like there's any option to deny them. You can only not install the app, unless the app chooses to build for the Android 6 permission system.

Of course you can deny them. After you install the app, just go into settings and deny every permission.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#27

Post by croon »

grecy wrote: post #24
teniutza wrote: post #20

Earlier quoted context omitted.

You mean this guy https://www.troyhunt.com/is-this-hooded-cyber-bandit-the-web... ?

I was think worse, like this: http://cdn.wccftech.com/wp-content/uploads/2017/03/icloud-sc... http://www.jordantimes.com/sites/default/files/styles/news_i... etc Usually show men in black clothes trying to climb in windows, etc.

I'm not sure what's most offensive between the paper mask and the URL using backslashes.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#28

Post by izacus »

ClassyJacket wrote: post #18
kbart wrote: post #8

Earlier quoted context omitted.

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

Well it's not like there's any option to deny them. You can only not install the app, unless the app chooses to build for the Android 6 permission system.

> Well it's not like there's any option to deny them. You can only not install the app, unless the app chooses to build for the Android 6 permission system.

On Android 6 or newer you can always deny permissions, even if the app targets older Androids. (Settings -> Apps -> -> Permissions).

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#29

Post by grecy »

croon wrote: post #27
grecy wrote: post #24

Earlier quoted context omitted.

I was think worse, like this: http://cdn.wccftech.com/wp-content/uploads/2017/03/icloud-sc... http://www.jordantimes.com/sites/default/files/styles/news_i... etc Usually show men in black clothes trying to climb in windows, etc.

I'm not sure what's most offensive between the paper mask and the URL using backslashes.

I really like "your.bank"

I wonder how many people would believe that works.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#30

Post by TeMPOraL »

grecy wrote: post #29
croon wrote: post #27

Earlier quoted context omitted.

I'm not sure what's most offensive between the paper mask and the URL using backslashes.

I really like "your.bank" I wonder how many people would believe that works.

With current new global TLDs? Why not?
Post reply on HN