This is a very neat and approachable write-up, but is the final result really a hack? If I understand correctly, you're getting an unprivileged shell on a device you own and have paired with your smartphone; more or less equivalent to installing a terminal emulator on your smartphone, except it's smart glasses in this case.
Should the ability to own one's devices really be treated as a vulnerability and reported to security teams?
Manipulating a system to get unintended access is a hack under any common definition.
"hack" on hackernews essentially means "I used my computer to do something". The overwhelming population of people here aren't security engineers, but rather developers.
I considered that, but the mentions of pwn2own and the bug bounty program have me thinking "hack" is used in the security/mainstream sense.
Hack as a term predates the concept of cyber security. It was originally "a quick and dirty solution that is clever"
[dead]
Sure but nowadays can you get unprivileged shell to your smartphone no matter the brand and model? Your TV? Your car infotainment system? Your smart fridge? I can continue on and on.
Actually having unprivileged access to something is quite rare nowadays in non-strictly computer products nowadays.
How is it not a hack to do something on a device that doesn't let you do it? Yes, the device should let you do whatever you want, but it doesn't, therefore this is a hack.
I'm going to try it on my glasses, and disable autoupdating ASAP.