[{"data":1,"prerenderedAt":358},["ShallowReactive",2],{"project-12802785":3},{"id":4,"name":5,"line":5,"line_source":6,"title":7,"url":8,"domain":9,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":34,"aspects":35,"strip":43,"post_text":46,"what":47,"said":69,"maker_in_thread":130,"shape":140,"grid":142,"attempts":320,"same_week":321,"maker_shows":39,"maker_hidden":350,"reader_version":351,"card":352},"12802785","Android 'root' phones via dirtyc0w exploit","title","Show HN: Android 'root' phones via dirtyc0w exploit","https:\u002F\u002Fgist.github.com\u002FArinerron\u002F0e99d69d70a778ca13a0087fa6fdfd80","gist.github.com","Arinerron",1477540370,2016,143,67,239,2264,11,"notable","security_privacy","exploit automation","other",[23,24,25,26],"dirtycow","android root","privilege escalation","cve-2016-5195","curious",-0.167,{"positive":30,"neutral":31,"mixed":32,"critical":33},2,26,0,9,37,{"docs":36,"execution":37,"idea":38,"privacy":40,"performance":42},{"positive":32,"critical":32},{"positive":32,"critical":32},{"positive":39,"critical":30},1,{"positive":32,"critical":41},4,{"positive":32,"critical":32},[39,44,44,32,44,44,32,44,44,45,44,32,39,44,44,44,39,32,44,44,39,39,32,39,44,44,39,44,32,44,32,45,39,44,44,39,32,32,32,32],3,5,null,{"problem":48,"audience":58,"pricing":46,"motivation":46,"time_to_build":46,"stack":67,"openness":68,"stage":68,"team_size":68},{"value":49,"source":50,"evidence":51},"Gaining root access on Android phones via the Dirty COW kernel bug","maker",[52,55],{"id":53,"by":10,"text":54},"12802788","I put 'root' in quotes, because technically, it isn't rooting. However, it creates a binary called 'run-as' that can execute packages as root. Not sure what the right term would…",{"id":56,"by":10,"text":57},"12803327","For those who didn't see it: I didn't write this exploit, I just wrote this script that automates the exploit. The repository with the actual exploit is here…",{"value":59,"source":60,"evidence":61},"Android users wanting root access on unpatched devices","inferred",[62,66],{"id":63,"by":64,"text":65},"12803814","w23j","So I have a Galaxy Nexus, which does not get OS Updates anymore (Android 4.3 at the moment). Do I understand correctly that vulnerabilities like this one mean I do not have any…",{"id":56,"by":10,"text":57},[],"unknown",{"praise":70,"objections":79,"requests":100,"questions":105,"alternatives":121},[71],{"value":72,"source":73,"evidence":74},"Useful, timely script","commenter",[75],{"id":76,"by":77,"text":78},"12803010","orliesaurus","Good thinking! I wonder if it will get patched soon enough",[80,90],{"value":81,"source":73,"evidence":82},"Downloading and running unverified scripts as root is risky",[83,87],{"id":84,"by":85,"text":86},"12803007","bastijn","I wonder how many people carelessly run a script that downloads, builds, and executed something with root access. If that zip gets compromised (i.e. The source means harm) there…",{"id":88,"by":10,"text":89},"12803231","That is really true. Any solution you propose? I mean, it is all open source, but if the author of the PoC repository were to put malicious code into the file, how would we know…",{"value":91,"source":73,"evidence":92},"Script was broken at first and the exploit repo was not the author's",[93,97],{"id":94,"by":95,"text":96},"12803589","ce4","The first goo.gl link is dead for me... Care to give the real link instead of a shortened URL? Edit as noted elsewhere, should be https:\u002F\u002Fgithub.com\u002Ftimwr\u002FCVE-2016-5195",{"id":98,"by":10,"text":99},"12811046","Okay, sorry guys. I know it's broken right now. The problem is that wget and unzip commands aren't being used properly. I can't fix it on my phone, because the editor isn't…",[101],{"value":102,"source":73,"evidence":103},"Give direct links instead of shortened URLs",[104],{"id":94,"by":95,"text":96},[106],{"value":107,"source":73,"evidence":108},"Does root survive a kernel patch, and can SELinux block it",[109,113,117],{"id":110,"by":111,"text":112},"12803067","scrollaway","Sure, but as soon as it's patched out, you're back to no root.",{"id":114,"by":115,"text":116},"12803186","omribahumi","Maybe I'm missing something here, but what stops you from putting a setuid \"su\" binary and keeping the root access, even if the kernel is upgraded?",{"id":118,"by":119,"text":120},"12803395","therein","You're root running in a limited selinux context.",[122],{"value":123,"source":73,"evidence":124},"Original CVE-2016-5195 exploit repo by timwr",[125,129],{"id":126,"by":127,"text":128},"12802908","edsouza","This is just automating running the exploit from here: https:\u002F\u002Fgithub.com\u002Ftimwr\u002FCVE-2016-5195",{"id":94,"by":95,"text":96},{"comments":131,"answered":39,"key":132},7,[133,134,137],{"id":88,"text":89},{"id":135,"text":136},"12803338","Thanks! What kind of warning message would you suggest? A \"the exploit might be compromised\" message, a \"verify your download with this hash\" message, or something else?",{"id":138,"text":139},"12803417","Thanks, I'll do that. One problem though is that I've already published the script here, and migrating to a new repository would leave everyone with a dead link, etc. I could…",{"commenters":141,"max_depth":131,"maker_replies":131,"first_comment_mins":39,"lifespan_hours":14},45,[143,145,147,150,151,155,156,158,162,166,169,173,175,179,180,183,187,190,192,194,196,198,199,200,202,204,206,209,212,215,217,220,221,223,226,228,231,234,237,239,242,245,247,250,252,255,257,260,264,267,270,272,274,276,279,283,287,290,293,297,301,304,307,310,312,314,317],[84,32,39,144,85,32],"project\u002Fcritical\u002Fnone",[88,32,32,146,10,39],"maker\u002Fneutral\u002Fnone",[148,32,44,149,85,32],"12803314","maker\u002Fneutral\u002Fdocs",[135,32,32,149,10,39],[152,32,44,153,154,32],"12803367","maker\u002Fneutral\u002Fexecution","anilgulecha",[138,32,32,146,10,39],[157,32,44,149,85,32],"12805268",[159,32,32,160,161,32],"12803968","commenter\u002Fneutral\u002Fnone","userbinator",[163,32,44,164,165,32],"12803259","project\u002Fneutral\u002Fexecution","slim",[167,32,32,160,168,32],"12803416","vsgxvhdxh",[170,32,32,171,172,32],"12810012","other\u002Fneutral\u002Fnone","gcb0",[126,39,44,174,127,32],"project\u002Fneutral\u002Fidea",[176,39,44,177,178,32],"12803062","project\u002Fneutral\u002Fnone","beefsack",[53,30,32,174,10,39],[181,30,44,174,182,32],"12802893","jmickey",[184,30,45,185,186,32],"12802916","project\u002Fpositive\u002Fidea","sdrothrock",[188,30,44,177,189,32],"12808026","daveloyall",[191,30,32,171,186,32],"12812546",[193,30,32,160,189,32],"12817016",[195,30,32,160,186,32],"12822824",[110,30,39,197,111,32],"project\u002Fcritical\u002Fidea",[114,30,44,174,115,32],[118,30,44,177,119,32],[201,30,44,177,115,32],"12804151",[203,30,44,177,189,32],"12808351",[205,30,44,177,119,32],"12826782",[207,30,44,177,208,32],"12803074","voltagex_",[210,30,39,144,211,32],"12803200","cyphar",[213,30,32,171,214,32],"12804949","digi_owl",[216,30,32,171,189,32],"12808223",[218,30,44,174,219,32],"12803158","executesorder66",[56,44,32,146,10,39],[94,44,44,222,95,32],"project\u002Fneutral\u002Fdocs",[224,44,44,222,225,32],"12803597","pasta",[63,41,39,227,64,32],"project\u002Fcritical\u002Fprivacy",[229,41,39,227,230,32],"12803944","akx",[232,41,32,171,233,32],"12803960","ferongr",[235,41,32,171,236,32],"12805993","kuschku",[238,41,32,160,233,32],"12806155",[240,41,39,227,241,32],"12803990","yasth",[243,41,44,244,64,32],"12804489","project\u002Fneutral\u002Fprivacy",[246,41,44,244,236,32],"12806001",[248,41,44,177,249,32],"12804057","pja",[251,41,32,160,172,32],"12810089",[253,41,39,227,254,32],"12804316","baq",[256,41,44,244,64,32],"12804446",[258,45,32,171,259,32],"12803550","gerty",[261,262,32,171,263,32],"12804192",6,"dep_b",[265,262,32,171,266,32],"12804213","rmsaksida",[268,131,44,177,269,32],"12803276","guelo",[98,271,32,153,10,39],8,[273,271,32,153,10,39],"12821783",[76,33,45,275,77,32],"maker\u002Fpositive\u002Fnone",[277,33,32,171,278,32],"12803100","fulafel",[280,281,39,197,282,32],"12804033",10,"qwertyuiop924",[284,281,44,285,286,32],"12805153","project\u002Fneutral\u002Fperformance","sp332",[288,17,44,177,289,32],"12803381","pewu",[291,17,44,177,292,32],"12805471","rkeene2",[294,295,44,177,296,32],"12804743",12,"radarsat1",[298,299,39,144,300,32],"12802961",13,"bitmapbrother",[302,299,32,171,303,32],"12802967","ommunist",[305,299,32,171,306,32],"12803735","lnx01",[308,299,32,171,309,32],"12803938","pbhjpbhj",[311,299,32,171,254,32],"12804356",[313,299,32,171,303,32],"12809352",[315,299,32,160,316,32],"12802986","Scaevolus",[318,299,32,160,319,32],"12802998","gst",[],[322,326,331,336,341,346],{"id":323,"name":324,"points":325,"category":19},"12834327","sudo-touchid",347,{"id":327,"name":328,"points":329,"category":330},"12843466","My first web app",297,"web_saas",{"id":332,"name":333,"points":334,"category":335},"12803860","Zone Messenger",194,"consumer_social",{"id":337,"name":338,"points":339,"category":340},"12838152","Fast Style Transfer",184,"ai",{"id":342,"name":343,"points":344,"category":345},"12842797","KQ",116,"dev_tools",{"id":347,"name":348,"points":349,"category":330},"12848656","Academic Bio",113,false,"v2",{"id":353,"name":5,"line":5,"ai":350,"cat":19,"year":12,"points":13,"comments":14,"rec":27,"s":354,"top":17,"kw":355,"maker":10,"domain":9,"tier":18,"attempts":32,"strip":356,"url":8,"mix":357,"praise":72,"objection":81,"sub":20},12802785,-0.17,[23,24,25,26],"1330330335301333103311013313030513310000",[30,31,32,33],1794036548907]