@siguza Look, my so-called "exploit" is already an incredibly un-legit (it doesn't even affect phones, so I have to manually enable the vulnerable act-as-Bluetooth Headset feature with root. And I'm not even going to try getting ASLR; bring your own /proc/<pid>/maps)
so at this point I don't really care about "legit", just how cool it looks.