Re: QuadRooter security flaw -- confusion

Path	csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From	"Percival P. Cassidy" <Nobody@NotMyISP.net>
Newsgroups	comp.mobile.android
Subject	Re: QuadRooter security flaw -- confusion
Date	Tue, 9 Aug 2016 13:58:48 -0400
Lines	43
Message-ID	<e0ujsmFeve0U1@mid.individual.net> (permalink)
References	<e0udobFdf2kU1@mid.individual.net> <XnsA65F7F7183F61timothybilyahoocom@216.166.97.131>
Mime-Version	1.0
Content-Type	text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding	7bit
X-Trace	individual.net /wOjazyTABFHEnRuxI2x1ARBnxP65XWSfVckydFPzFwVVf9ZEk
Cancel-Lock	sha1:7PD4rrAVUtvm1yw3v8TzNQ8aWjg=
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.1.0
In-Reply-To	<XnsA65F7F7183F61timothybilyahoocom@216.166.97.131>
Xref	csiph.com comp.mobile.android:33254

Show key headers only | View raw

On 08/09/2016 01:31 PM, Tim wrote:

>> Yesterday morning, immediately after reading about the QuadRooter
>> security flaw that exists in some QualComm chips, I ran the Check Point
>> QuadRooter Scanner app, which told me that my Nexus 5X phone (with the
>> July security patches) was *not* affected.
>>
>> My wife's Nexus 5X (bought a few days before mine) already had the
>> August security patches, and the Check Point QuadRooter Scanner app
> told
>> us that her phone *was* affected.
>>
>> Yesterday afternoon my phone got the August security patches, and I ran
>> the Check Point QuadRooter Scanner app, which told me that my Nexus 5X
>> phone *was* affected.
>>
>> I then ran QualComm's own scan tool on both phones, and it told me that
>> my phone is *not* affected but that my wife's *is* affected.
>>
>> I hope the new security fix comes soon.
>>
>> Perce
>>
> One thing to do would be to compare apps between your phone and your
> wife's. If the scanner is corrent, then the source could be an app that
> your wife has that you don't.
>
> FFIW, Quadrooter told me that my Nexus 7 (2013)[August security patch
> installed] is vulnerable to the CVE-2016-5340 vulnerability, which is not
> patched yet. It is supposed to be patched in the next security update.

But I thought that this vulnerability was in the hardware, not in any 
particular apps that may have been installed. My wife's phone is white 
whereas mine is black, so even though were bought only days apart they 
could very well have significantly different manufacturing dates and 
different chip revisions.

Why did the August update apparently introduce a new vulnerability in 
mine, and why does the Check Point Scanner give a different result on my 
phone from QualComm's own?

Perce

Thread

QuadRooter security flaw -- confusion "Percival P. Cassidy" <Nobody@NotMyISP.net> - 2016-08-09 12:14 -0400
  Re: QuadRooter security flaw -- confusion Tim <timothybil@yahoo.com> - 2016-08-09 12:31 -0500
    Re: QuadRooter security flaw -- confusion "Percival P. Cassidy" <Nobody@NotMyISP.net> - 2016-08-09 13:58 -0400
      Re: QuadRooter security flaw -- confusion Tim <timothybil@yahoo.com> - 2016-08-09 22:38 -0500
        Re: QuadRooter security flaw -- confusion nospam <nospam@nospam.invalid> - 2016-08-09 23:57 -0400
        Re: QuadRooter security flaw -- confusion Chris <ithinkiam@gmail.com> - 2016-08-10 07:20 +0000
        Re: QuadRooter security flaw -- confusion Andy Burns <usenet@andyburns.uk> - 2016-08-10 09:27 +0100
      Re: QuadRooter security flaw -- confusion "Percival P. Cassidy" <Nobody@NotMyISP.net> - 2016-08-11 13:08 -0400
  Re: QuadRooter security flaw -- confusion Nigel Wade <nmw@local.domain> - 2016-08-10 09:48 +0100

csiph-web