Hacker News Reader

It's funny; without your example, I probably would have had to spend another 5-10 minutes figuring out exactly what this was.

View on HN

Yeah, the research paper is a bit wordy. It's novel, though, because here it adds another vector for malware to inject into legitimate apps to hijack a phone, without requiring new permissions.

I could see it becoming a serious concern in places like China, where 3rd party markets are much more popular, and republishing existing apps with malware is commonplace.

That's actually a great point I hadn't thought of - if the attack uses English, your average Chinese person won't know what's being said and what's being taken.

If you don't speak English, your phone probably isn't set to EN-US or another locale where the voice recognition would accept english. I'm guessing this depends on the voice reco being set to the right locale.

Reply on news.ycombinator.com