Free scanner to manage risk of major android vulnerability

[badblue1__]

https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner

I found this app today while reading an article here Scan Your Device for the Android I downloaded it, seems to scan your device awful quick. It said my device wasn't patched yet, which we know this to be true, also said my device was clear of any malicious apps.

This just came up on the playstore yesterday, so does it work or not?, according to bluebox i guess it's all we got until someone comes up with a patch to fix security.

Any thoughts, just thought i'd throw this out there.

EDIT : similar thread on AF...http://androidforums.com/android-lounge/736900-four-year-old-bug-could-allow-attackers-steal-data-99pc-android-devices.html

 

[Phil Nickinson]

Our take: Android Central Community Search | Android Central

 

[bigsupersquid]

this link gets fairly specific about the malware exploit...
https://securityledger.com/2013/07/exploit-code-released-for-android-security-hole/

from what it says, you could manually crack open any .apk you're concerned about with an archiving tool (.apk is a form of .zip apparently) and look for duplicate filenames inside. That seems to be the gimmick used to bypass the signature verification.
Feel free to correct anything I'm misinformed about

 

[badblue1__]

this link gets fairly specific about the malware exploit...
https://securityledger.com/2013/07/exploit-code-released-for-android-security-hole/

from what it says, you could manually crack open any .apk you're concerned about with an archiving tool (.apk is a form of .zip apparently) and look for duplicate filenames inside. That seems to be the gimmick used to bypass the signature verification.
Feel free to correct anything I'm misinformed about

Great article, very interesting, thanks for posting it.

 

[badblue1__]

Our take: Android Central Community Search | Android Central

Great write up Phil, as usual, that's some good stuff.
I feel honored that you posted in my thread.

When i first got my phone i learned a lot reading your articles, even before i became a member here at AC, just lurking.
Keep up the great work, i enjoy reading your articles.
THANK YOU!