Hacker News new | ask | show | jobs
by e12e 2321 days ago
> Which priviliges is that? Can it access user data? Snoop on input/output?

This is somewhat addressed in a comment/reply by jorge:

https://insinuator.net/2020/02/critical-bluetooth-vulnerabil...

> Hi, the Bluetooth daemon is a process on the Android system that runs in the background (daemon) that is responsible for managing the Bluetooth controller and handling of various Bluetooth related protocols, such as HCI, L2CAP and GATT. As it has to process attacker-controlled input it is susceptible to attacks. In addition, it has to run with high privileges (not as ‘root’ like on Linux) to support features like: – file transfer => read files – share Internet connection => configure network and VPN – Human Interaction Devices => emulate keyboard and mouse