Hacker News Reader

I hope someone builds an exploiter for this on Android soon - I upgraded too fast to the latest security release :/

I doubt android kernels have unprivileged namespaces enabled.

Normal android apps don't have permission to send raw packets.

To quote the mail:

> On Android, processes with gid=3004/AID_NET_RAW are able to create AF_PACKET sockets (mediaserver) and can trigger the bug.

I believe that this is the Android permission android.permission.NET_ADMIN, so it should work in theory...

I don't know what permission it is, but I know that there is no permission that Play Store apps can have that allows sending raw packets. There's an open bug about it on the AOSP bug tracker.

System apps can obviously do it - hence the "(mediaserver)" comment.

Reply on news.ycombinator.com