Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4
2231 posts

Uber Geek


  # 1363626 12-Aug-2015 13:24
Send private message

1eStar: After doing a bit more reading tonight it seems that even doing a build.prop modification does not change the stagefright vulnerability. The recommended interim mitigation including for unrooted phones is:

1. Disable MMS automatic download in all apps that handle SMS
2. Use Firefox and in about:config set stagefright.disabled to true.
3. Use MXplayer as your default Video handler

I found the above in this thread:

http://forum.xda-developers.com/android/help/android-mms-stagefright-exploit-t3166457/post62197171#post62197171


^ Hell no!
I won't go anywhere NEAR that player on my phone - sucks the battery dry after watching a 22 minute video while the stock player on Nexus 4 (5.1.1) hardly touches the battery.

1256 posts

Uber Geek


  # 1363670 12-Aug-2015 13:59
Send private message

HTC One (M7) running 5.0.2 failed, 3/6.

 
 
 
 


gzt

10862 posts

Uber Geek


  # 1373271 24-Aug-2015 17:46
Send private message

Motorola released patch on the 10th. Awaiting carrier testing and deployment.

https://motorola-global-portal.custhelp.com/app/answers/prod_answer_detail/a_id/106654

Mr Snotty
8764 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

2231 posts

Uber Geek


  # 1373925 25-Aug-2015 15:11
Send private message

nzkiwiman: Nexus 4
Failed 3/6

Have not received the newest version of 5.1.1 yet via OTA. Not keen on flashing 

 

Got the OTA update on 21/8, installed with no issues

57 posts

Master Geek


  # 1377643 1-Sep-2015 11:29
Send private message

Galaxy S Mini GT I8190N: vulnerable
Galaxy S GT I-9000: most of the check apps will either not install or not run. (I guess at age 3 it's considered obsolete.) Vulnerable.

I have written to Vodafone asking when we can expect fixes and in the mean time have disabled MMS (don't use it anyway).

Regards,
Peter.

2118 posts

Uber Geek

Trusted

  # 1377647 1-Sep-2015 11:38
Send private message

mdf: So I got the notification that a new update was available (Nexus 5, Lollipop 5.1.1). Tried to install it and got a fatal error message (the wee android guy lying on his back with his chest open and a red triangle exclamation mark thing). I have unlocked the bootloader and rooted, but that hasn't stopped OTA updates previously. Now when I check for updates it tells me I'm up to date, but using the Stagefright checker still shows the same vulnerabilities.

I found a couple of references to similar errors with the Nexus 6, but nothing about the 5 or how to fix. These other threads refer to being able to try and install multiple times though, which I can't seem to do.

Anyone else experienced anything similar? 

Does anyone know if you reflash manually you can just get the incremental updates, or does it have to be a fresh/clean install? I could do without setting everything up again.


Late to the party - you probably have this WAY figured out by now,  but you can't install OTA's if you're rooted now.

I believe you can just flash the latest system.img from the factory builds page though to work around this, because you have unlocked your bootloader so it should be simple.

 
 
 
 


548 posts

Ultimate Geek


  # 1381295 7-Sep-2015 18:47
Send private message

My 2degress HTC M8 just had an update. Not vulnerable anymore

57 posts

Master Geek


  # 1381308 7-Sep-2015 19:13
Send private message

Beddhist: Galaxy S Mini GT I8190N: vulnerable
Galaxy S GT I-9000: most of the check apps will either not install or not run. (I guess at age 3 it's considered obsolete.) Vulnerable.

I have written to Vodafone asking when we can expect fixes and in the mean time have disabled MMS (don't use it anyway).


Reply from Vodafone:

Thank you very much for raising this with us. We are aware of the theoretical Stagefright vulnerability and are working with our handset suppliers on a plan to address it for Vodafone customers.   The security of Vodafone customers is our highest priority, but it is important to note that Stagefright was identified by a security researcher, who has not published the details, and there are no indications of actual attacks on Android OS users exploiting this vulnerability.  
At the moment, Vodafone do have a Vodafone Secure Device Manager product that gives our customers the visibility of their fleet, and the ability to better manage devices, which could mitigate some of these risks.


No comment.

While not waiting for them I have disabled MMS reception, so I believe our phones are no longer vulnerable. I believe our carriers should take responsibility here and communicate with us, perhaps even giving us the option to turn off MMS at their end. But they won't, because they earn on every MMS sent.

Regards,
Peter.



BDFL - Memuneh
64241 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 1381329 7-Sep-2015 19:45
Send private message

You don't need to turn off MMS - just turn off automatic download, and then download only the ones from people you know.

On another hand, wife's HTC One M8 from Spark just downloading update.





57 posts

Master Geek


  # 1381343 7-Sep-2015 20:10
Send private message

Yes, that's what I meant: I turned of automatic reception. The tricky part with our older Android version is that none of the instructions I found to show/set default apps actually work. I had to work by deduction, i.e. which apps had already received MMS.

I never ever use MMS anyway, so if I wanted to get radical I would delete the MMS gateway and that would be the end of it.

129 posts

Master Geek


  # 1388031 15-Sep-2015 17:05
Send private message

LG G4 H815T Aus version of the phone. All Zimperium tests pass after recent OTA software update version 10h dated 25 Aug 2015. Version 10f did not pass the test (2 fails).

1222 posts

Uber Geek


  # 1389322 17-Sep-2015 21:32
Send private message

nz nexus 5 ota updated this morning to android 5.1.1. build LMY48M

passed all tests

yah !

73 posts

Master Geek


  # 1391713 22-Sep-2015 10:42
Send private message

LG G2 was recently upgraded to 5.0.2 v30b-sea - now passes all tests.  Previous version (v30a) failed most - 5/6 or something like that.

3948 posts

Uber Geek

Subscriber

  # 1391728 22-Sep-2015 11:00
Send private message

StructureDr: LG G2 was recently upgraded to 5.0.2 v30b-sea - now passes all tests.  Previous version (v30a) failed most - 5/6 or something like that.


Similarly G3 and G4 models have received an upgrade and now pass all tests - good to see LG's been relatively quick to sort this out. How are other brands doing with this thus far?

1 | 2 | 3 | 4
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Intel expands 10th Gen Intel Core Mobile processor family
Posted 23-Aug-2019 10:22


Digital innovation drives new investment provider
Posted 23-Aug-2019 08:29


Catalyst Cloud becomes a Kubernetes Certified Service Provider (KCSP)
Posted 23-Aug-2019 08:21


New AI legaltech product launched in New Zealand
Posted 21-Aug-2019 17:01


Yubico launches first Lightning-compatible security key, the YubiKey 5Ci
Posted 21-Aug-2019 16:46


Disney+ streaming service confirmed launch in New Zealand
Posted 20-Aug-2019 09:29


Industry plan could create a billion dollar interactive games sector
Posted 19-Aug-2019 20:41


Personal cyber insurance a New Zealand first
Posted 19-Aug-2019 20:26


University of Waikato launches space for esports
Posted 19-Aug-2019 20:20


D-Link ANZ expands mydlink ecosystem with new mydlink Mini Wi-Fi Smart Plug
Posted 19-Aug-2019 20:14


Kiwi workers still falling victim to old cyber tricks
Posted 12-Aug-2019 20:47


Lightning Lab GovTech launches 2019 programme
Posted 12-Aug-2019 20:41


Epson launches portable laser projector
Posted 12-Aug-2019 20:27


Huawei launches new distributed HarmonyOS
Posted 12-Aug-2019 20:20


Lenovo introduces single-socket servers for edge and data-intensive workloads
Posted 9-Aug-2019 21:26



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.