[The Register] New Android vulnerability enters after StageFright

[The_Unbeliever]

Hours after Google and smartphone makers promised an imminent patch for the infamous Stagefright vulnerability another critical flaw in Android is being outed.

The “Certifi-gate” vulnerability allows applications to gain illegitimate privileged access rights, typically reserved for remote support applications that are either pre-installed or personally installed on Android devices.

Attackers can exploit Certifi-gate to gain unrestricted device access, allowing them to steal personal data, track device locations, turn on microphones to record conversations, and much more.

The vulnerability allows an attacker to take advantage of insecure apps certified by OEMs and carriers to gain unrestricted access to any device, including screen scraping, key logging, private information exfiltration, and back door app installation.

Rest of the article can be found here.

 

[The_Unbeliever]

Lovely.

Pity Symbian's dead. And I don't wanna any crackberries.

That leaves Apple or Windows.

 

[blaaislaai]

Am I the the only one around here that does not care about phone security?
Dont have a secured lockscreen nor PIN enabled, dont have anything to hide and dont care if strangers can see/read and hear what I do :erm:

 

[The_Unbeliever]

Am I the the only one around here that does not care about phone security?
Dont have a secured lockscreen nor PIN enabled, dont have anything to hide and dont care if strangers can see/read and hear what I do :erm:

Believe me, I do care as well.

Scary... I have disabled MMS auto-retrieval on all my Android devices. Already received two very suspicious MMS messages. Wife also got one, but she deleted it (I also disabled MMS auto-retrieval on hers as well).

Deusche Telekom disabled MMS auto-retrieval on their network for now, wish our slapgat SP's can do the same and disable the same here too.

See : http://www.talkandroid.com/259814-d...val-until-the-stagefright-exploit-is-patched/

 

[DrJohnZoidberg]

Well I don't go installing unknown apps on my phone all willy-nilly anyway. If you do you should be prepared for bum hurt.

 

[The_Unbeliever]

Well I don't go installing unknown apps on my phone all willy-nilly anyway. If you do you should be prepared for bum hurt.

StageFright does not revolve around installing unknown apps. It is activated via a specially-crafted MMS - and can be blocked by turning off MMS auto-retrieval for now until a patch is installed.

I installed a warezed app once Never again. Learnt my lesson.

 

[DrJohnZoidberg]

StageFright does not revolve around installing unknown apps. It is activated via a specially-crafted MMS - and can be blocked by turning off MMS auto-retrieval for now until a patch is installed.

I installed a warezed app once Never again. Learnt my lesson.

Yep, that one I made changes for. Talking about the new one.

 

[The_Unbeliever]

Yep, that one I made changes for. Talking about the new one.

Ah, sorry, my mistake.

Wonder how long we will have to wait for a patch (or dozens) to appear...

 

[The_Unbeliever]

Sent out an email to allusers@company to inform them of this bugger.

Wonder who will actually read and act on it? If they don't act on it, then I won't feel sorry for them.

BTW how will you know if your device has been compromised with Stagefright?

 

[princeradebe]

And I just adopted Android from BB10.