Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.mobile.android > #21844

Re: Stagefright Detector App

From Dave Higton <dave@davehigton.me.uk>
Newsgroups comp.mobile.android
Subject Re: Stagefright Detector App
Date 2015-08-08 20:58 +0100
Organization Home
Message-ID <42b616f054.DaveMeUK@my.inbox.com> (permalink)
References <d2mjktF3kkU1@mid.individual.net>

Show all headers | View raw


In message <d2mjktF3kkU1@mid.individual.net>
          "s|b" <me@privacy.invalid> wrote:

>Stagefright Detector App - by Zimperium INC.
><https://play.google.com/store/apps/details?id=com.zimperium.stagefrightdetector>
>
>Installed on my Samsung Galaxy S4 Mini. After analysis it shows this:
><http://oi60.tinypic.com/287qhk4.jpg>
>
>It seems I'm still vulnerable, after disabling MMS auto video download
>and auto video download in WhatsApp and Viber. (Hangouts is supposed to
>be uninstalled.)
>
>What now?

Yes.  The above app is a misnomer - it isn't a detector at all.  It
merely makes a claim as to whether your device could be vulnerable.
If you've disabled all the routes by which SF could do anything, it
/still/ says you could be vulnerable - I don't think it detects
whether the routes are or are not enabled.

Pretty much useless IMHO.

Dave

Back to comp.mobile.android | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Stagefright Detector App "s|b" <me@privacy.invalid> - 2015-08-08 16:56 +0200
  Re: Stagefright Detector App Dave Higton <dave@davehigton.me.uk> - 2015-08-08 20:58 +0100
    Re: Stagefright Detector App Roger Mills <watt.tyler@gmail.com> - 2015-08-08 22:03 +0100

csiph-web