The so-called man in the disk attack uses Android’s permissive external storage to wreak havoc on devices.