Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Can someone walk me through the process of exploiting Android or iOS with this? I never attached a keyboard to my phones. How do I get to the app store and download an app using just the keyboard? On iOS it requires the fingerprint if I remember correctly, at least on mine. But it's for work and I do mostly very basic stuff with it, so I could be wrong.


On Android for free apps I believe the default is no password confirmation Assuming recent versions, you could press home + type "Play Store" to search and open the app, search for something and install without a password, assuming an unatended device, in my phone at least you can click to wake up the screen


Can you use "tab" to cycle through UI elements on Android or how would you navigate the app store?


You can, I just tested, 2 tabs + Enter get you writing on the Search Box

A surprising amount of keyboard shortcuts work on android, Alt+Tab works to get Recent Activities, Directional keys let you move aroud elements, even the special keys like home/calculator work

But there's a lot of unintuitive stuff, back button is Windows + Del


the author says they can't do anything that requires further authentication. you'd need to chain this with another attack.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: