Android Stagefright Exploit Detector

Laptops, Notebooks, PDA's, MP3 Players, Cell Phones
User avatar
FlyingPenguin
Flightless Bird
Posts: 33161
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Post by FlyingPenguin »

Another vetted Stagefright Tester. See what this says:
https://play.google.com/store/apps/deta ... ctor&hl=en
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

Image
User avatar
EvilHorace
Life Member
Posts: 6611
Joined: Wed Nov 22, 2000 7:14 am
Location: Greenfield, WI

Post by EvilHorace »

After yesterday my phone wouldn't allow another SW update check for 24 hrs so today it found another one and that one fixed it. It then passed both App tests (previously failed both) so I then uninstalled them, no longer needed.
Thanks for the info guys.
<img src="http://www.pcabusers.org/images/evil2.gif">
User avatar
FlyingPenguin
Flightless Bird
Posts: 33161
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Post by FlyingPenguin »

My Verizon Moto-X phones STILL don't have an update for this (I have auto-download of MMS disabled).

But today I received notification that Android Lollipop is available, which is also LONG overdue. I guess maybe they were close enough to releasing Lollipop that they just rushed that out instead of trying to patch StageFright.

HOPEFULLY this isn't some old build of Lollipop that also is susceptible to StageFright...
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

Image
User avatar
psypher
Golden Member
Posts: 893
Joined: Sun Nov 02, 2014 1:05 pm
Location: Marietta

Post by psypher »

Thankfully my S4 is not vulnerable. Just picked up another one on eBay since my old one was crapping out.
[SIZE="1"]When the world is mine, your death shall be quick and painless.[/size]
User avatar
Losbot
Life Member
Posts: 5205
Joined: Sun Jul 13, 2014 8:59 am
Location: South Florida

Post by Losbot »

Google should be announcing their new Nexus 5 and Nexus 6 later this month. Can't wait. I need a new phone since my current one is cracked.
------------------------------------------

Image
User avatar
psypher
Golden Member
Posts: 893
Joined: Sun Nov 02, 2014 1:05 pm
Location: Marietta

Post by psypher »

Losbot wrote:Google should be announcing their new Nexus 5 and Nexus 6 later this month. Can't wait. I need a new phone since my current one is cracked.
If they continue making the batteries built in, I think I'll just keep buying S4s.
[SIZE="1"]When the world is mine, your death shall be quick and painless.[/size]
User avatar
Losbot
Life Member
Posts: 5205
Joined: Sun Jul 13, 2014 8:59 am
Location: South Florida

Post by Losbot »

That's most of them these days. Not a big deal.
------------------------------------------

Image
User avatar
FlyingPenguin
Flightless Bird
Posts: 33161
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Post by FlyingPenguin »

True. Battery life is much longer now. My 2 year old moto-x phones are showing no loss of battery life.

Just upgraded my spare moto-x to Lollipop before doing mine and the wife's. Zimperium StageFright detector app says I'm not vulnerable.

Liking Lollipop. Wife doesn't like change, though, do I'm sure she'll have issues until she gets used to it.
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

Image
User avatar
Executioner
Life Member
Posts: 10351
Joined: Wed Nov 22, 2000 11:34 am
Location: Woodland, CA USA

Post by Executioner »

I have a S5, but I'm not interested in phones with batteries you can't replace yourself.
On a side note, my wife's iPhone 5 quit working when it was washed with clothes. I bought an iPhone tool kit and removed the face to access the battery. I ordered a replacement battery and the phone still works LOL after going through the washing machine.
User avatar
ZYFER
Posts: 2137
Joined: Thu Nov 07, 2002 4:10 pm
Location: Tampa Bay, Florida

Post by ZYFER »

You should use this instead:

https://play.google.com/store/apps/deta ... htdetector

Lookout doesn't check for all the stagefright vulnerabilities. It said mine was safe long a go though my most recent firmware I flashed the other day just patched it. LG is doing a good job at updating their phones. Mine came with 5.0.2 and is on 5.1.1 now. It isn't even their flagship product.
When all else fails, replace the user.
User avatar
Losbot
Life Member
Posts: 5205
Joined: Sun Jul 13, 2014 8:59 am
Location: South Florida

Post by Losbot »

Google released their new Nexus 5x and 6p. I ordered a 5x so it'll be here in about 3 to 4 weeks when they ship out. I've got my Google Fi sim card ready to go in once that happens. Been wanting to give their service a try.
------------------------------------------

Image
User avatar
FlyingPenguin
Flightless Bird
Posts: 33161
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Post by FlyingPenguin »

New twist using audio files:

New Stagefright attack targets Android phones with phony audio files
http://www.theverge.com/2015/10/1/94316 ... audio-file
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

Image
User avatar
FlyingPenguin
Flightless Bird
Posts: 33161
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Post by FlyingPenguin »

This is back again. They found another flaw. Same deal: disable automatic downloads in MMS. Don't open a video or picture unless you trust who sent it to you. Nexus phones will get an immediate update while the rest of us get to hang in the wind.

Another good reason why my next phone will likely be a Nexus.
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

Image
User avatar
ZYFER
Posts: 2137
Joined: Thu Nov 07, 2002 4:10 pm
Location: Tampa Bay, Florida

Post by ZYFER »

It is the poor design of the Android ecosphere. There should be a main OS update and a security for current OS update, but it doesn't look like Google intends to support any Android versions but the current ones.
When all else fails, replace the user.
User avatar
Executioner
Life Member
Posts: 10351
Joined: Wed Nov 22, 2000 11:34 am
Location: Woodland, CA USA

Post by Executioner »

Yeah when my S5 dies, I may decide to get something different like a Nexus, since they seem more concerned with supporting their customers.
Post Reply