AI智能体正在重写手机安全规则,该不该让“豆包助手”模拟你的手指?
Di Yi Cai Jing·2025-12-03 09:33

Core Points - The nubia M153 engineering device faced issues with logging into WeChat, which have since been resolved, but related tasks remain restricted [1] - The focus of industry experts is on the INJECT_EVENTS permission granted to the nubia M153, which allows applications to inject simulated user input events, a high-risk permission in the Android system [2][3] - The INJECT_EVENTS permission is typically reserved for device manufacturers and their authorized partners, indicating a significant level of access and control over the device [2][3] - Concerns have been raised about the security risks associated with granting such permissions to third-party applications, including potential unauthorized access to sensitive information [3][4] - The collaboration between AI applications like Doubao and hardware manufacturers like ZTE is essential for obtaining high-level permissions, which can enhance the functionality of AI assistants [4][8] Industry Insights - The INJECT_EVENTS permission requires applications to be signed with the manufacturer's system private key, effectively integrating them into the operating system [3][6] - The increasing complexity of interactions between AI agents and users raises concerns about security risks such as identity theft and data breaches [6][7] - The development of AI applications is seen as a competitive landscape among mobile manufacturers, AI model developers, and traditional app developers, focusing on data access and user privacy [8] - The target audience for the Doubao assistant is primarily developers, as it is an engineering device rather than a consumer product [8]