Remix.run Logo
Retr0id 3 hours ago

Security-through-obscurity (i.e. using a custom ROM on a lesser-known device) does have some upsides, since you're less likely to be compatible with off-the-shelf exploits. But this is much less true now that LLMs exist, and anyone who can afford the tokens can port any exploit to any and all vulnerable devices.

Who maintains the kernel+driver trees used by the LineageOS port you're using? And what's the modem's security like?

jambalaya8 2 hours ago | parent | next [-]

Just gave me something else to be annoyed about today ("anyone who can afford the tokens can port any exploit to any and all vulnerable devices.")

Not sure that is exactly correct yet but guessing not long til it would be. Bleh.

Retr0id 2 hours ago | parent [-]

I can tell you from first-hand experience that it is true already (Well, it's true for the specific exploit/device pairings I've tried, I've not tried to construct an omni-exploit)

Completely random public example: https://github.com/BuSung-dev/Root-My-Galaxy-Payloads/pull/1... (where GLM 5.2 is credited with the port) (Check out the other PRs in that repo for other similar examples)

nunobrito an hour ago | parent | prev [-]

[flagged]

Retr0id 32 minutes ago | parent [-]

If a state actor wants to pwn your phone, they don't need to orchestrate a complex inter-organizational conspiracy to get there.