Hacker News new | ask | show | jobs
by larvaetron 3095 days ago
> (Edit #1, 7.30pm GMT): A lot of people are saying that this flaw requires physical access. However, as I pointed out above, you don’t need physical access, a maliciously installed application can easily access the activity and capture the code.)
1 comments

So you don't need physical access you just need to install a malicious application? Okay then.

Why can one application even explore and access the views of another?

Accessibility APIs