Bug In Android Passes Keystrokes To Root Shell 205
pasokon writes "ZDNet reports on an Android bug in T-Mobile G1s with early versions of the firmware: 'When the phone booted it started up a command shell as root and sent every keystroke you ever typed on the keyboard from then on to that shell. Thus every word you typed, in addition to going to the foreground application would be silently and invisibly interpreted as a command and executed with superuser privileges. ... open the keyboard tray on your G1, ignore anything you see on the screen, and type these 8 keystrokes: (enter)-r-e-b-o-o-t-(enter). Poof, your phone will reboot.'"
Scary (Score:5, Funny)
Imagine the scamming possible: "reply to this text message with the access code telnetd for a chance to win $1000!"
Confluence (Score:5, Funny)
Suddenly, the memory-and-keystroke-saving command names of the past combine with the keystroke-saving text-speak of the present to create the nightmarish user interaction bugs of the future.
reboot (Score:4, Funny)
doesn't wo
Re:Uh oh (Score:3, Funny)
I am typing this from my Android. I have tried this and I don't have any pr
NO CARRIER
A Conversation (Score:5, Funny)
Re:Uh oh (Score:1, Funny)
Maybe you should try this one:
enter rm -Rf / enter
Just to be sure.
Re:Easier than the iPhone (Score:5, Funny)
Re:A Conversation (Score:5, Funny)
Re:Confluence (Score:5, Funny)
The extraordinary synergistic elements of modern input paradigms combined with the forward thinking interactivity of the past pushes the envelope of tomorrow's technology to new heights.
Re:A Conversation (Score:3, Funny)
funny yes, but the shell is already root so there is no sudo necessary.
Dang. My other slashdot username is "rm -rf /" (Score:2, Funny)
Re:This is simply mind-boggling. (Score:5, Funny)
This is obviously bad for Apple. I mean if the iPhone weren't all like, locked down, and, um....
Yeah, anyway, the iPhone is done for, no question. I mean you can't even GET to root shell on an iPhone, and here it is a standard feature on Android! Mind-boggling indeed!
Re:Life under the thumb of cellular phone companie (Score:5, Funny)
Re:Easier than the iPhone (Score:4, Funny)
In the name of all that is holy, who has a file matching *.* in their root?!
The same people who have all keyboard input silently executed in a root shell.
Re:convenient problem (Score:3, Funny)
I'm beginning to suspect it could be intentional for free advertising at this point.
Only if they're advertising iPhones or BlackBerrys.
I must be tired (Score:3, Funny)
Re:Life under the thumb of cellular phone companie (Score:5, Funny)
Instant karma's a bitch.
Customers leave through the back door (Score:2, Funny)
After hearing about the backdoor kill switch, the platform became irrelevant to me in the first place. :/
Sad because I was looking forward to it. I guess there must be a way to block that though, right? Unless software updates remove the remover remover?
*looks at last sentence*
Wow... it's just not worth the effort to even begin that fight...
Re:Nah it'll never work (Score:3, Funny)
Re:Easier than the iPhone (Score:4, Funny)
Good. You should never enter a command you don't understand. I'm all for raising the bar above water level.
Re:Open source, remember? fix already out (Score:2, Funny)
These phones are not on the google networks, and not low risk items like Google Earth. In many cases phones are not toys and cosumers expect them to be safe and secure.
And that my friend is why I have the cheapest prepaid phone available, your attitude! I simply don't care to be like so many people I see tethered to an electronic device that makes them unaware of their surroundings and appear rude and narcissistic in public! I don't know you! I don't want to talk to you! And I certainly don't want to hear that you need to stop by the gas station to pick up a gallon of milk because you forgot it at Wal-Mart! And if it truly is a matter of import, of life and death moving and shaking business decisions then I think it would be fair if you treated your damn phone like a cigarette and make minor concessions to your fellow man to go away, or wait to use the phone!
Re:This is simply mind-boggling. (Score:4, Funny)
BTW what's this 'Android' you're talking about?
Re:True (Score:2, Funny)
Re:Uh oh (Score:3, Funny)
Re:A Conversation (Score:4, Funny)
A relative to little Bobby Tables [xkcd.com] perhaps? ;-)
Re:Uh oh (Score:1, Funny)
An accurate description of the Swiss navy. Next?
Re:This is simply mind-boggling. (Score:5, Funny)
If you want to keep from fubar-ing your G1 by typing in the wrong stuff accidentally, just type "cat [enter]" first thing when you power on the device, and it will be defused from then on. All input will be harmlessly filed away to stdout.
Wait--you're missing the big picture.
Jailbreak the phone!
Woo! We now have root access! We can hax0r the phone and load our own custom applic...what? Oh. Shit. Wrong phone. I'll wait for the next iPhone article.