Massive Android Stagefright security flaw: Google and manufacturers respond

[Kevin Lancaster]

Massive Android Stagefright security flaw: Google and manufacturers respond

Google and a number of smartphone manufacturers have responded to Zimperium’s disclosure of the Android Stagefright bug.

 

[BBotha]

Android phone suppliers need to change their update methods now that they are increasingly becoming the target for hackers. Samsung users will properly not see the update to the phone for the next year or so.

 

[Progenix Oj101]

ASLR is address space layout randomization, I know it as something else from long ago

 

[The_Unbeliever]

And our beloved Service Providers will probably sit for ages on said patches "for testing purposes"...

 

[furpile]

Google should split their updates into different sections, with security updates going to all phones immediately. OS upgrades and UI stuff can go through the manufacturers, and only the radio parts should have to go through the cellular operators. Then at least we will get a bit more updates.

 

[The_Unbeliever]

Google should split their updates into different sections, with security updates going to all phones immediately. OS upgrades and UI stuff can go through the manufacturers, and only the radio parts should have to go through the cellular operators. Then at least we will get a bit more updates.

^ sense at last.


Which phones will Samsung target for updates, and which will they leave alone? :erm:

 

[Sonic2k]

Very quick to diss Apple and Apple users... but dead silent when the own beloved devices have these huge flaws exposed...

 

[Spliffcat]

Cynogen Roms is all you need or build your own.Remove all Google rubbish.

 

[backstreetboy]

Very quick to diss Apple and Apple users... but dead silent when the own beloved devices have these huge flaws exposed...

I see 6 posts above you Voertjek Apple fanboy..

 

[Necropolis]

Cynogen Roms is all you need or build your own.Remove all Google rubbish.

Assuming there is a ROM for your phone

 

[kianm]

This MMS BS that we no longer use even though it's still active

 

[Spliffcat]

Just delete the MMS .apk .Millions of other apps to use.

 

[Jet-Fighter7700]

Assuming there is a ROM for your phone

And that you can root and rom it easily

 

[ColinR]

Should have bought a Nexus.

 

[Necropolis]

And that you can root and rom it easily

Indeed.

 

[cerebus]

Cynogen Roms is all you need or build your own.Remove all Google rubbish.

That is not a solution that the vast majority of Android phone users will ever use. The real problem with Android vulnerabilities isn't with the techies like you who can flash custom roms, it's with the enormous numbers (what is it now, 1billion Android devices? And around 1-2% running 5.1, and even less who will get a security update?) of people who will never know that there is an issue and never get an update from their manufacturers to fix the problem. Those people are sitting ducks for exploits like this.