Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.mobile.android > #21839 > unrolled thread
| Started by | "s|b" <me@privacy.invalid> |
|---|---|
| First post | 2015-08-08 16:56 +0200 |
| Last post | 2015-08-08 22:03 +0100 |
| Articles | 3 — 3 participants |
Back to article view | Back to comp.mobile.android
Stagefright Detector App "s|b" <me@privacy.invalid> - 2015-08-08 16:56 +0200
Re: Stagefright Detector App Dave Higton <dave@davehigton.me.uk> - 2015-08-08 20:58 +0100
Re: Stagefright Detector App Roger Mills <watt.tyler@gmail.com> - 2015-08-08 22:03 +0100
| From | "s|b" <me@privacy.invalid> |
|---|---|
| Date | 2015-08-08 16:56 +0200 |
| Subject | Stagefright Detector App |
| Message-ID | <d2mjktF3kkU1@mid.individual.net> |
Stagefright Detector App - by Zimperium INC. <https://play.google.com/store/apps/details?id=com.zimperium.stagefrightdetector> Installed on my Samsung Galaxy S4 Mini. After analysis it shows this: <http://oi60.tinypic.com/287qhk4.jpg> It seems I'm still vulnerable, after disabling MMS auto video download and auto video download in WhatsApp and Viber. (Hangouts is supposed to be uninstalled.) What now? Samsung promised to have an update by the end of the month (and monthly updates after that), but what do I do in the meantime? Can I close CVE-2015-3827 and CVE-2015-3829? -- s|b
[toc] | [next] | [standalone]
| From | Dave Higton <dave@davehigton.me.uk> |
|---|---|
| Date | 2015-08-08 20:58 +0100 |
| Message-ID | <42b616f054.DaveMeUK@my.inbox.com> |
| In reply to | #21839 |
In message <d2mjktF3kkU1@mid.individual.net>
"s|b" <me@privacy.invalid> wrote:
>Stagefright Detector App - by Zimperium INC.
><https://play.google.com/store/apps/details?id=com.zimperium.stagefrightdetector>
>
>Installed on my Samsung Galaxy S4 Mini. After analysis it shows this:
><http://oi60.tinypic.com/287qhk4.jpg>
>
>It seems I'm still vulnerable, after disabling MMS auto video download
>and auto video download in WhatsApp and Viber. (Hangouts is supposed to
>be uninstalled.)
>
>What now?
Yes. The above app is a misnomer - it isn't a detector at all. It
merely makes a claim as to whether your device could be vulnerable.
If you've disabled all the routes by which SF could do anything, it
/still/ says you could be vulnerable - I don't think it detects
whether the routes are or are not enabled.
Pretty much useless IMHO.
Dave
[toc] | [prev] | [next] | [standalone]
| From | Roger Mills <watt.tyler@gmail.com> |
|---|---|
| Date | 2015-08-08 22:03 +0100 |
| Message-ID | <d2n92dF5cn5U2@mid.individual.net> |
| In reply to | #21844 |
On 08/08/2015 20:58, Dave Higton wrote: > In message<d2mjktF3kkU1@mid.individual.net> > "s|b"<me@privacy.invalid> wrote: > >> Stagefright Detector App - by Zimperium INC. >> <https://play.google.com/store/apps/details?id=com.zimperium.stagefrightdetector> >> >> Installed on my Samsung Galaxy S4 Mini. After analysis it shows this: >> <http://oi60.tinypic.com/287qhk4.jpg> >> >> It seems I'm still vulnerable, after disabling MMS auto video download >> and auto video download in WhatsApp and Viber. (Hangouts is supposed to >> be uninstalled.) >> >> What now? > > Yes. The above app is a misnomer - it isn't a detector at all. It > merely makes a claim as to whether your device could be vulnerable. > If you've disabled all the routes by which SF could do anything, it > /still/ says you could be vulnerable - I don't think it detects > whether the routes are or are not enabled. > > Pretty much useless IMHO. > > Dave It looks to me like an app designed to frighten you into buying something else which you almost certainly don't need! -- Cheers, Roger ____________ Please reply to Newsgroup. Whilst email address is valid, it is seldom checked.
[toc] | [prev] | [standalone]
Back to top | Article view | comp.mobile.android
csiph-web