Beacown (Linux WiFi Exploit)

gw99 3 years ago | |

I think we need a vulnerability buzzword bingo.

Scaevolus 3 years ago | |

Some sort of evil bee/cow hybrid with psychic (wifi) waves would work well as a logo, to help generate buzz.

Manu40 3 years ago | | |

I was thinking something similar. A cow with x's over the eyes, possibly glowing red; with antennae's instead of horns with wifi waves coming off them.

ncmncm 3 years ago | |

Just to be clear, everyone really should panic. Right?

kibwen 3 years ago | | |

Plenty of Android devices have kernels that are too old to be vulnerable. Versions 5.1 and newer are vulnerable.

sgt 3 years ago | | |

Which versions of Android would that translate to?

llarsson 3 years ago | | |

It seems to me that Android version and kernel version are not linked in any meaningful way.

My phone is Android 12 and the kernel is 4.19.x, which initially came out in 2018 (but is an LTS one, so it's fine).

ncmncm 3 years ago | | |

Older kernels are instead vulnerable to older bugs, since fixed, of not less severity, but more systematically exploited.

Wowfunhappy 3 years ago | | |

Do you have any particular exploits in mind?

The idea that you could gain RCE without the user doing anything except being in range of a wifi hotspot—no need to run an app, load a website, or even open an image—strikes me as exceptionally concerning. It's not quite the holy grail of "connect this device to the internet anywhere in the world and get hacked within minutes", but it's coming close.