Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Is that only in category (read phonebook -> read phonebook & make calls) or across category (read phonebook -> read phonebook & setup a VPN)?

I can understand the first given what they're trying to do, the second would be outrageous.



Within a category. However, as explained by the article, even that can involve some pretty serious escalations (e.g, "read SD card" to "format SD card"!).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: