This is a very neat and approachable write-up, but is the final result really a hack? If I understand correctly, you're getting an unprivileged shell on a device you own and have paired with your smartphone; more or less equivalent to installing a terminal emulator on your smartphone, except it's smart glasses in this case.

Should the ability to own one's devices really be treated as a vulnerability and reported to security teams?

▲

Aurornis 2 hours ago | parent | next [-]

Manipulating a system to get unintended access is a hack under any common definition.

▲

tejtm an hour ago | parent [-]

The intent of the owner of the artifact is the only consideration. The wish of some previous owner is irrelevant.

▲

Aurornis 31 minutes ago | parent [-]

The part you’re missing is your assumption that only the owner of the artifact would attempt to get access to the system.

	▲	tejtm 22 minutes ago \| parent [-]
		Yes. Assumptions are being made. It sounds like I should be considered a criminal because someone else might indeed be a criminal and I disagree. If the next argument is you are unable to tell the difference myself and the criminal, then that is on you not me.

▲

no-dr-onboard 4 hours ago | parent | prev | next [-]

"hack" on hackernews essentially means "I used my computer to do something". The overwhelming population of people here aren't security engineers, but rather developers.

	▲	mzajc 4 hours ago \| parent \| next [-]
		I considered that, but the mentions of pwn2own and the bug bounty program have me thinking "hack" is used in the security/mainstream sense.
	▲	serioussecurity 2 hours ago \| parent \| prev \| next [-]
		Hack as a term predates the concept of cyber security. It was originally "a quick and dirty solution that is clever" https://en.wiktionary.org/wiki/hack
	▲	nullsanity 2 hours ago \| parent \| prev [-]
		[dead]

▲

stavros 4 hours ago | parent | prev [-]

How is it not a hack to do something on a device that doesn't let you do it? Yes, the device should let you do whatever you want, but it doesn't, therefore this is a hack.

I'm going to try it on my glasses, and disable autoupdating ASAP.