Android vulnerability checker

[Allen Brandt]

ran across this free open source app that checks an Android device for a host of vulnerabilities.

Based on this, I have 1 StageFright vulnerability (related to some itunes thing) and one of the tests gave an error and won't run. Overall, looks pretty good

Here's a link: https://forums.androidcentral.com/e...s?id=com.nowsecure.android.vts&token=1Ay_js0k

 

[B. Diddy]

Sounds useful, thanks!

 

[psf57]

Don't know, it is showing StageFright: sf-itunes-poc = Is Vulnerable: True..............but, I do not have itunes on my LG G4. So why is it showing that info?

 

[Bosbouer]

Sounds useful, thanks!

Weird statements in their description though! "your information stays on the device. Not shared with anyone" and then in the 3rd paragraph "When a vulnerability is discovered, Google receives word and applies a patch to Android"
I'm staying away for starters.

 

[anon(782252)]

No thanks. It might be open source but the conflicting info mentioned above makes it a no go.

 

[B. Diddy]

Interesting points. But those statements could still be consistent--they may want to assure users that no extraneous parties will get data except for Google, who would be the most important people to notify about security issues.

I agree, though--seems prudent to hold off until more information is available about the app and dev.

EDIT: Their website seems pretty detailed and legit, with citations in the tech press: https://www.nowsecure.com/press/