Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.mobile.android > #33292

Re: QuadRooter security flaw -- confusion

Show key headers only | View raw

On 08/09/2016 01:58 PM, I wrote:

>>> Yesterday morning, immediately after reading about the QuadRooter
>>> security flaw that exists in some QualComm chips, I ran the Check Point
>>> QuadRooter Scanner app, which told me that my Nexus 5X phone (with the
>>> July security patches) was *not* affected.
>>>
>>> My wife's Nexus 5X (bought a few days before mine) already had the
>>> August security patches, and the Check Point QuadRooter Scanner app
>> told
>>> us that her phone *was* affected.
>>>
>>> Yesterday afternoon my phone got the August security patches, and I ran
>>> the Check Point QuadRooter Scanner app, which told me that my Nexus 5X
>>> phone *was* affected.
>>>
>>> I then ran QualComm's own scan tool on both phones, and it told me that
>>> my phone is *not* affected but that my wife's *is* affected.
>>>
>>> I hope the new security fix comes soon.

>> One thing to do would be to compare apps between your phone and your
>> wife's. If the scanner is corrent, then the source could be an app that
>> your wife has that you don't.
>>
>> FFIW, Quadrooter told me that my Nexus 7 (2013)[August security patch
>> installed] is vulnerable to the CVE-2016-5340 vulnerability, which is not
>> patched yet. It is supposed to be patched in the next security update.
>
> But I thought that this vulnerability was in the hardware, not in any
> particular apps that may have been installed. My wife's phone is white
> whereas mine is black, so even though were bought only days apart they
> could very well have significantly different manufacturing dates and
> different chip revisions.
>
> Why did the August update apparently introduce a new vulnerability in
> mine, and why does the Check Point Scanner give a different result on my
> phone from QualComm's own?

I erred in describing one of the QuadRooter scanner apps as "Qualcomm's 
own": although the app's name starts with "Qualcomm," it is the product 
of another business that wants me to use their "mobile security" app and 
wants to entice me to pay for an upgrade, just as the Check Point one is.

Perce

Back to comp.mobile.android | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

QuadRooter security flaw -- confusion "Percival P. Cassidy" <Nobody@NotMyISP.net> - 2016-08-09 12:14 -0400
  Re: QuadRooter security flaw -- confusion Tim <timothybil@yahoo.com> - 2016-08-09 12:31 -0500
    Re: QuadRooter security flaw -- confusion "Percival P. Cassidy" <Nobody@NotMyISP.net> - 2016-08-09 13:58 -0400
      Re: QuadRooter security flaw -- confusion Tim <timothybil@yahoo.com> - 2016-08-09 22:38 -0500
        Re: QuadRooter security flaw -- confusion nospam <nospam@nospam.invalid> - 2016-08-09 23:57 -0400
        Re: QuadRooter security flaw -- confusion Chris <ithinkiam@gmail.com> - 2016-08-10 07:20 +0000
        Re: QuadRooter security flaw -- confusion Andy Burns <usenet@andyburns.uk> - 2016-08-10 09:27 +0100
      Re: QuadRooter security flaw -- confusion "Percival P. Cassidy" <Nobody@NotMyISP.net> - 2016-08-11 13:08 -0400
  Re: QuadRooter security flaw -- confusion Nigel Wade <nmw@local.domain> - 2016-08-10 09:48 +0100

csiph-web