Disclosure: in some cases, a Linux user can use doas to edit files in /etc/periodic/15min, allowing to execute code as root. I haven't reported this to cron because maintainer's e-mail address was so long I didn't want to type it.
lauren@hayasaka ~ $ doas python3 ./turbohack.py
lauren@hayasaka ~ $ tail -n2 /tmp/out.txt
[+] Executing: whoami
root
ios users; how old is your (main) phone (since release)?
donโt vote if your main phone isnโt an iphone and/or you donโt connect it to the internet
android users, how old is your (main) phone (since release)?
donโt vote if your main phone doesnโt run android and/or you donโt connect it to the internet
linux-postmarketos-qcom-msm89x7: Upgrade to v7.0.2-r0
New kernel rebase on the way.
Notable Changes:
- Redmi 4A, 5A, GO now have a common base.
- Redmi 4A, 5A, GO devicetrees are backported from upstream.
- Simplify panel pinctrls.
https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8447