DS Forums

 
 

Android Stagefright + many more to come...


Reply
Thread Tools Search this Thread
Old 18-10-2015, 03:35
dancemat
Forum Member
 
Join Date: Jan 2015
Posts: 8

Hello Everyone,

Quite shocked that I couldn't find any mention of Stagefright on the forum. At least not in my searches.

http://arstechnica.com/gadgets/2015/...ty-armageddon/

http://arstechnica.com/security/2015...text-messages/

http://opensignal.com/reports/2015/0...fragmentation/

The fragmentation of Android Support needs to be fixed, and soon. I have ideas about this, but whether they'll be listened to, is another thing.

I think it's Google's job to persuade OEM's to change their ways. I feel this is the banking crisis all over again. Screw up royally, but yet carry on as if nothing happened...

Kind Regards,

Matthew
dancemat is offline   Reply With Quote
Please sign in or register to remove this advertisement.
Old 18-10-2015, 07:06
Thine Wonk
Forum Member
 
Join Date: Mar 2009
Posts: 14,545
There's been loads of discussion about it since August it's just the forum search function is broken.
Thine Wonk is offline   Reply With Quote
Old 18-10-2015, 13:37
Stuart_h
Forum Member
 
Join Date: Jul 2005
Posts: 3,474
Hello Everyone,

Quite shocked that I couldn't find any mention of Stagefright on the forum. At least not in my searches.

http://arstechnica.com/gadgets/2015/...ty-armageddon/

http://arstechnica.com/security/2015...text-messages/

http://opensignal.com/reports/2015/0...fragmentation/

The fragmentation of Android Support needs to be fixed, and soon. I have ideas about this, but whether they'll be listened to, is another thing.

I think it's Google's job to persuade OEM's to change their ways. I feel this is the banking crisis all over again. Screw up royally, but yet carry on as if nothing happened...

Kind Regards,

Matthew
As per previous comment it's been discussed plenty.

Google provide raw android. It's up to the handset makers to decide how much to mess with it. Android is trying to move more to a place where major changes can be rolled out via apps rather than relying on OS updates but that can only go so far.
Stuart_h is offline   Reply With Quote
Old 19-10-2015, 12:41
The Sack
Forum Member
 
Join Date: Jan 2003
Location: S6 1SW WTID UTO FTB
Posts: 6,327
Hello Everyone,

Quite shocked that I couldn't find any mention of Stagefright on the forum. At least not in my searches.

http://arstechnica.com/gadgets/2015/...ty-armageddon/

http://arstechnica.com/security/2015...text-messages/

http://opensignal.com/reports/2015/0...fragmentation/

The fragmentation of Android Support needs to be fixed, and soon. I have ideas about this, but whether they'll be listened to, is another thing.

I think it's Google's job to persuade OEM's to change their ways. I feel this is the banking crisis all over again. Screw up royally, but yet carry on as if nothing happened...

Kind Regards,

Matthew
App makers such as Delicious Inc. released a stagefright workaround for their SMS apps within days of it being announced, in that case the OS didnt even need patching to carry on safely even though the underlying exploit was still present.
The Sack is offline   Reply With Quote
Old 19-10-2015, 13:16
IvanIV
Forum Member
 
Join Date: May 2006
Posts: 25,199
The vulnerability is used when the OS reads media file metadata, so fixing an SMS app is only a part of the solution. I think Alphabet needs to make most of the OS non-modifiable by OEMs and leave only skins for them. Yes, that's what made Android so popular in the first place, but one has to change their thinking if there's a billion of devices with your OS on them and you have no way of patching them.
IvanIV is offline   Reply With Quote
Old 19-10-2015, 20:31
finbaar
Forum Member
 
Join Date: Nov 2009
Posts: 3,921
The vulnerability is used when the OS reads media file metadata, so fixing an SMS app is only a part of the solution. I think Alphabet needs to make most of the OS non-modifiable by OEMs and leave only skins for them. Yes, that's what made Android so popular in the first place, but one has to change their thinking if there's a billion of devices with your OS on them and you have no way of patching them.
What's it got to do with Alphabet?
finbaar is offline   Reply With Quote
Old 20-10-2015, 07:34
IvanIV
Forum Member
 
Join Date: May 2006
Posts: 25,199
What's it got to do with Alphabet?
I call them Alphabet now, since they own Google or whatever their relationship is.
IvanIV is offline   Reply With Quote
Old 20-10-2015, 09:32
The Sack
Forum Member
 
Join Date: Jan 2003
Location: S6 1SW WTID UTO FTB
Posts: 6,327
The vulnerability is used when the OS reads media file metadata, so fixing an SMS app is only a part of the solution. I think Alphabet needs to make most of the OS non-modifiable by OEMs and leave only skins for them. Yes, that's what made Android so popular in the first place, but one has to change their thinking if there's a billion of devices with your OS on them and you have no way of patching them.
I didn't even call it a solution, i said workaround, i made it quite clear the problem was still present.
The Sack is offline   Reply With Quote
Old 20-10-2015, 11:54
mbsnr
Forum Member
 
Join Date: May 2004
Location: Ireland
Posts: 284
The whole Stagefright 2.0 thing is very quiet compared to the original Stagefright 1.0 back a few months ago. It's like the media have 'reported that' and there's no more to see... Although this vulnerability is much easier to exploit and therefore worse than 1.0.

This app detects if your device is vulnerable. Zimperium are the guys who originally discovered the issue and reported it to Google back in Aug.

https://play.google.com/store/apps/d...detector&hl=en

I also find it strange that my handset manufacturer rushed out a fix for 1.0 but so far hasn't indicated anything about a fix for 2.0....
mbsnr is offline   Reply With Quote
Old 22-10-2015, 12:36
SkipTracer
Forum Member
 
Join Date: Feb 2009
Location: The City and County of Bristol
Posts: 2,623
I don’t know much, if anything about Stagefright but yesterday the OH had a system update for Stagefright on her Moto G 3G Gen 1 but I have had nothing on my Moto G 4G Gen 1.

I assume this is for version 2 but like I said, I know nothing.
SkipTracer is offline   Reply With Quote
Old 23-10-2015, 04:10
dancemat
Forum Member
 
Join Date: Jan 2015
Posts: 8
There's been loads of discussion about it since August it's just the forum search function is broken.
I suppose the bright side of this, it doesn't involve patching 950 million devices. Hopefully it will be fixed soon.

As per previous comment it's been discussed plenty.

Google provide raw android. It's up to the handset makers to decide how much to mess with it. Android is trying to move more to a place where major changes can be rolled out via apps rather than relying on OS updates but that can only go so far.
It's an oversight on Google's part (putting it politely). I feel far from in a polite mood on this issue. As it's more a case of how much crapware, and what little they have to do in order to put a device out there. Yes, it's a terribly competitive market. But few people want to make a considerable purchase and then 18 months down the line. Make another one. Not because there's anything wrong with the phone, but because the manufactures don't have the resources and / or money to support it.

A company as large as Google should be doing more to convince / persuade manufactures to do the right thing.

Unless we all make a stand together, then this mess will continue. I for one won't be buying another Android phone until it has.

The vulnerability is used when the OS reads media file metadata, so fixing an SMS app is only a part of the solution. I think Alphabet needs to make most of the OS non-modifiable by OEMs and leave only skins for them. Yes, that's what made Android so popular in the first place, but one has to change their thinking if there's a billion of devices with your OS on them and you have no way of patching them.
Yes thinking needs to change. It's ashame and unforgivable that this wasn't done beforehand though.

Sure, it's happened now. Yet it is disappointing to see companies not showing any will to do the right thing, and look after their customers. After all they wouldn't have any profit without us.

I know it's had ample media coverage but no one has been forthcoming with providing a solution.

Makes you wonder how bad things can get before someone decides enough is enough...

Surely if this was Microsoft or Apple, there would be lawsuits flying around.

You buy an Apple or Microsoft computer. Then 18 months down the line. Nearly all models are affected. And they turn round and give you the middle finger?

The answer is simple they say, just buy another one.
dancemat is offline   Reply With Quote
Old 23-10-2015, 12:46
Echo1
Forum Member
 
Join Date: May 2004
Location: Home
Posts: 5,864
I don’t know much, if anything about Stagefright but yesterday the OH had a system update for Stagefright on her Moto G 3G Gen 1 but I have had nothing on my Moto G 4G Gen 1.

I assume this is for version 2 but like I said, I know nothing.
It wasn't aan update for Stagefright but a newer version of Lollipop (from 5.0.2 to 5.1).
Echo1 is offline   Reply With Quote
Old 23-10-2015, 13:23
SkipTracer
Forum Member
 
Join Date: Feb 2009
Location: The City and County of Bristol
Posts: 2,623
It wasn't aan update for Stagefright but a newer version of Lollipop (from 5.0.2 to 5.1).
There is no sign of it now it’s been installed but I’m 90% certain it said something about Stagefright in the update and both my Moto G’s have had 5.1 along long time now and there both still 5.1 now.

Does anyone know a way of checking what system updates have taken place on Android phones ?
SkipTracer is offline   Reply With Quote
Old 23-10-2015, 19:12
jchamier
Forum Member
 
Join Date: Mar 2000
Location: This forum
Posts: 3,389
Does anyone know a way of checking what system updates have taken place on Android phones ?
Check the Build number in the About page.

My Moto G 4G 1st edition is build LPB23.13-17 on Android 5.1 and IS vulnerable to Stagefright 1 and 2.
jchamier is offline   Reply With Quote
 
Reply




 
Forum Jump


All times are GMT. The time now is 13:12.