Hacking the Meta Ray-Ban smartglasses

It's really sad that getting a shell on a device you own is now considered a vulnerability.

This is a very neat and approachable write-up, but is the final result really a hack? If I understand correctly, you're getting an unprivileged shell on a device you own and have paired with your smartphone; more or less equivalent to installing a terminal emulator on your smartphone, except it's smart glasses in this case.

Should the ability to own one's devices really be treated as a vulnerability and reported to security teams?

Maybe I’ve still got the old PS3/PSP-exploit mentality, but reporting an arbitrary code execution vuln to the OEM is kind of sad… that deliberately closes a door for people to use their devices as they see fit.

Of course, the “don’t update after this firmware version” bit would always be the case (since any widely-distributed such vuln will be patched eventually), but deliberately moving the timeline to the left is sad.

,mkj xn sbdjbcd dwud wbsnwu moa hxw

Nice. How robust is this with software upgrades though? Also looks like arbitrary code execution in the app sandbox, so no persistance?

(dupe) https://news.ycombinator.com/item?id=50406224