soisses

The reasoning blocks are only temporarily part of the context. They aren't part of the context in the next turn anymore so (2) wouldn't really be an issue.

> I presume the second bug they were using was an already-fixed kernel bug That's true, @jduck confirmed that on twitter. It's an old, fixed, bug that has nothing to do with stagefright and could be exploited by every app on the phone or every rce in any app on the phone.

> Regardless, the question you were responding to was more about how most of the exploits people put together do not satisfy the "remote" and "silent" parts, as opposed to the "I got root" part; the latter is comparatively easy

FWIW, "throughout the whole chain" was part of the question.

There isn't much in the list that applications like Hangout or Chrome don't have anyway. It's still a very serious vulnerability, but the overstating is just clever marketing by a security company.

The stagefright bugs gave control over the media-player daemon of Android. This daemon is not running as root, it's even jailed with SELinux, but it has some interesting permissions like microphone-access.

Despite the media hype you can't root your phone with the stagefright bugs and so it wouldn't qualify for the bounty.

Right, we saw some of bypasses like this lately.

And I believe we'll see more, because we add more and more features to the lock-screens.

Seems photos are accessible with a new iOS9 flaw: http://www.idownloadblog.com/2015/09/20/ios-9-access-photos-...

How can this be, if they are encrypted while the phone is locked?