Stagefright Hack

[katesbb]

So by now you've probably read about the StageFright hack: Most Android phones can be hacked with a simple MMS message or multimedia file | PCWorld

Does anyone know about the status of a fix for the Moto X (Verizon in my case)? Since they've known about it for months, might a fix already be in the latest OS we received?

 

[fatboy97]

You might want to read what AndroidCentral said about this: The 'Stagefright' exploit: What you need to know | Android Central

 

[monsieurms]

You might want to read what AndroidCentral said about this: The 'Stagefright' exploit: What you need to know | Android Central

Unfortunately, that article mostly raises questions not answers. Not that I'm blaming them--there aren't a lot of answers. But it doesn't have much of a plan in how to avoid. It doesn't tell us when patches will come through the various carriers. It doesn't include comments from Lookout or other security firms that you might hope would address this. It doesn't tell us what to do in general.

 

[fatboy97]

Unfortunately, that article mostly raises questions not answers. Not that I'm blaming them--there aren't a lot of answers. But it doesn't have much of a plan in how to avoid. It doesn't tell us when patches will come through the various carriers. It doesn't include comments from Lookout or other security firms that you might hope would address this. It doesn't tell us what to do in general.

Maybe, but I think it's a little more information than others.

I did hear something on TV this morning, but they are even worse than any online information. According to them Google has a fix and has given it to manufacturers... now it's up to them to deliver that via an OTA patch. So maybe it's time to complain to Motorola and ask them when they will deliver this.

 

[davidnc]

I have turned off Auto - Retrieve MMS messages in my messenger ,while waiting for a patch release. Just a step I could take now.

 

[fatboy97]

I have turned off Auto - Retrieve MMS messages in my messenger ,while waiting for a patch release. Just a step I could take now.

Typically I don't get MMS messages, so if I turn this off will I still get a notification that I have a message and some way of looking at the message and dealing with it?

 

[davidnc]

Typically I don't get MMS messages, so if I turn this off will I still get a notification that I have a message and some way of looking at the message and dealing with it?

I'm not for sure off since this is the first I disable it.I haven't gotten any since disabling it yet
I would assume would require some kind of manual action / notification or something like , since its not actually blocking it .

So some way of being able to decide if you want to allow or not , I would say.

Edit: I found this

If you disable this option, only the message header displays in the message list, and you will be prompted to download the attachment(s).

 

[davidnc]

Yup tested it sent myself a picture. I know who its from,, from avatar showing ( its me)
And shows this message before ya open it

Sent from my Nexus 6

 

[monsieurms]

I have turned off Auto - Retrieve MMS messages in my messenger ,while waiting for a patch release. Just a step I could take now.

That's what Lookout said the only temporary solution is when I asked them.

 

[osubeavs728]

That's what Lookout said the only temporary solution is when I asked them.

That's the best solution to go with until a patch is pushed. That and not opening mms from random numbers. The reason why it is such a problem is because most have the auto retrieve on, which allows the malicious code to get injected right away. But if auto retrieve is off and you don't click anything from strange numbers, no worries.

 

[AXEL314]

I'm currently rooted on 4.4.2 and wasn't sure how an ota would work for me. In the meantime, I went into my buildprop editor and change everything stagefright to false; also turned off auto receive for my MMS

Posted via the Android Central App