Conversation

Dan Kaminsky
@dakami
Look what you do to people sometimes, security.
Quote Tweet
mcc
@mcclure111
OK so - adb push into the data directory of my application is not allowed because of permissions - but i'm allowed to adb push into a temp directory, then adb shell, then run-as, then copy files over - what. why. - that's slow - can i work around it? - how do people live this way
Show this thread
Image
1
5
mcc
@mcclure111
Replying to
@dakami
it's baffling because there's no security! it makes it really hard to develop code without protecting against any attack i can think of!
2
1
mcc
@mcclure111
Replying to
@DanielMicay
and
@dakami
but adb is the user interface people use in practice it just doesn't seem to make sense to offer a high-level user primitive like recursive push, but not offer the high-level user primitive of run-as, especially given recursive push is much less useful without run-as?
1
1
Daniel Micay
@DanielMicay
Replying to
@mcclure111
and
@dakami
App developers are expected to use Android Studio including the gradle-based app builds and other tooling. OS developers use ADB with userdebug builds where tools like `adb root` and `adb sync` exist. There are a lot of differences between the tooling for each including building.
1
1
Show replies
Daniel Micay
@DanielMicay
Replying to
@DanielMicay
@mcclure111
and
@dakami
They expect developers to use high-level tools provided by Android Studio like developer.android.com/studio/debug/d rather than using the low-level SDK directly or the on-device with direct use of tools like `cmd` and `dumpsys`. It's treated pretty much like an implementation detail.
developer.android.com
View on-device files with Device File Explorer  |  Android Developers
Learn how to view, copy, and delete files on an Android device with the Device File Explorer.
1
1
Show replies
Show replies