T-Mobile Stagefright update -- version LYZ28J

[anon(9072051)]

Evidently an update was released yesterday (8/5), WiFi only. Anyone on T-Mobile get this OTA yet?

https://support.t-mobile.com/docs/DOC-18109

 

[grover5]

I haven't gotten it yet. I just checked.

Posted via the Android Central App

 

[NastyNeil]

Nothing here. I keep checking every little while. Wish I didn't know. It consumes me...... Lol

 

[anon(9072051)]

Hmmm. Day #2 and not one report of a successful OTA patch?

Is Stagefright our latest WMD?

 

[Othoric]

I don't see that version posted on the Google developer's page. The latest image I see if for LMY48I.

Sent from my Nexus 6 using Tapatalk

 

[anon(9072051)]

You're right! Thanks! I've deleted the link in my post. So much for trusting reddit posts. Or the Google Developers page, for that matter. Whoever updates that page listed the 5.1.1 (LMY48I) update at the bottom of the table for Nexus 6 factory images, and it's still there as of 1:00pm EST.

Small wonder there are articles making the rounds today about "impatient" Nexus 6 users flashing the wrong factory image and losing cellular connections. Those users evidently "read" that table as half-assedly as I did.

 

[monsieurms]

Someone told me that Lollipop already contains the fix (running 5.0.1). Does anyone know if that is correct, i.e., if you're running Lollipop, there won't be a patch because it's not needed?

 

[markst]

Nope

Sent from my Nexus 6 using Tapatalk

 

[anon(9072051)]

Someone told me that Lollipop already contains the fix (running 5.0.1)

I've seen no mention of any proper "fix" in Lollipop. Google's position, though, seems to be that anyone running Android 4.0 or higher is not supremely vulnerable to the Stagefright exploit because ASLR (Address Space Layout Randomization), which was added to the Android OS with 4.0, will prevent that exploit from "taking root," figuratively speaking.

Android 'Stagefright' exploit: What you need to know | Android Central

P.S. Day #3 and no one claims to have received the LYZ28J OTA.

(Though a T-Mobile Note Edge customer has verified the Samsung OTA with screen captures on an XDA forum, and one person on Project Fi claims to have received the OTA while setting up a brand new N6.)

 

[monsieurms]

I've seen no mention of any proper "fix" in Lollipop. Google's position, though, seems to be that anyone running Android 4.0 or higher is not supremely vulnerable to the Stagefright exploit because ASLR (Address Space Layout Randomization), which was added to the Android OS with 4.0, will prevent that exploit from "taking root," figuratively speaking.

Android 'Stagefright' exploit: What you need to know | Android Central

P.S. Day #3 and no one claims to have received the LYZ28J OTA.

(Though a T-Mobile Note Edge customer has verified the Samsung OTA with screen captures on an XDA forum, and one person on Project Fi claims to have received the OTA while setting up a brand new N6.)

Well, today I got a spam text message. Wasn't the first time. But since this Stagefright alert, I was very careful. I had already disabled "auto retrieve" of MMS messages. I tried to see how I could block the sender. In doing so, I opened the message, but did nothing to dl mms content. I got an alert "this message is converting to mms format" I shut down, deleted it. Hope I'm not screwed..I thought from what I'd read that disabling the "auto download" was sufficent. I'm hoping that "convert message" just made it capable of being MMS rather than actually dl'ing content.

 

[thatguy97]

Well, today I got a spam text message. Wasn't the first time. But since this Stagefright alert, I was very careful. I had already disabled "auto retrieve" of MMS messages. I tried to see how I could block the sender. In doing so, I opened the message, but did nothing to dl mms content. I got an alert "this message is converting to mms format" I shut down, deleted it. Hope I'm not screwed..I thought from what I'd read that disabling the "auto download" was sufficent. I'm hoping that "convert message" just made it capable of being MMS rather than actually dl'ing content.

But congratulations you could be the first person in the world to actually be affected by this

No but seriously I hope your phone is all good

Posted From my Nexus 6/Nexus 7 2013/Surface pro 3

 

[NastyNeil]

Just received my update. I'm in NJ if it matters.

 

[markst]

Just received the T-Mobile Stagefright update..

Sent from my Nexus 6 using Tapatalk

 

[anon(9072051)]

It actually exists??! I gave up on even thinking about it Saturday. Can one of you post a screen capture of your new build number to verify?

Actually, don't bother. People on XDA are saying the same thing, and one guy posted a link to the OTA for anyone interested in downloading and flashing (a mere 25MB):

I got the T-Mobile LYZ28J update. How to get… | Nexus 6 | XDA Forums

 

[epidemicsparc]

I actually just got it and was able to save it...

I've shared it on my Google Drive for whomever wants it... crap it won't let me post links...

It was kind of strange as it downloaded to /data/data/com.google.android.gms/app_download/update.zip

I think this is everything you need...

EDIT:

drive.google.com/open?id=0B2JOhvla0DK7ZGVlQ1E3aURJdjA (add https:// in front of it)

 

[monsieurms]

Got the patch last night. Worked fine.

Lookout's detector app for Stagefright says "phone no longer vulnerable."

Just hope that's not too late!

Is there anyone who knows of anything that would actually scan to see if the malicious code is still on your device (even if it can't execute anything)? That would indicate whether the patch was .... too late.

 

[anon(9072051)]

NOW the LYZ28J factory image is available on the Google Developers page:

https://developers.google.com/android/nexus/images?hl=en

 

[Mst99]

Got mine yesterday, the stagefright app says no longer vulnerable...

 

[anon(9072051)]

Is anybody else still waiting for this freakin' OTA? Or has Legere had me blackballed for questioning T-Mo veracity?

I really don't wanna have to flash it for one stinkin' patch.

 

[ChillyMutt]

I have not received the patch - Moto X 2nd gen 2014. Called t-mobile support yesterday.
They knew absolutely nothing and could not find ANY information on Stagefright.
Between this virus and android's issued with bluetooth, I've decided to go back to iOS.