Join Nostr
2024-08-15 21:38:58 UTC
in reply to

GrapheneOS on Nostr: This is absolutely not a real security issue. It's a demo app that's disabled by ...

This is absolutely not a real security issue. It's a demo app that's disabled by default which can be enabled via Android Debug Bridge. An attacker with Android Debug Bridge access or a filesystem access exploit enabling them to turn it on has zero reason to use it. It adds zero attack surface and it was included for a legitimate reason for demo devices. This is a lot worse than claiming that ADB itself is a backdoor which is at least a real world threat.

https://grapheneos.social/@GrapheneOS/112967309987371034