Note 3 heartbleed SSL issues

[daviddlt]

So..my note 3 has the heartbleed bug vulnerability..what now??

 

[daviddlt]

Running kit kat 4.4

 

[superlawyer15]

This is interesting...

I read somewhere earlier today (will try to dig up the source) that only android 4.1.1 was vulnerable

 

[DurhamHusker]

I got the same results using my Sprint Galaxy S3 running Android 4.3

Interesting, indeed ....

 

[daviddlt]

Not buy anything till we receive an update? I asked Samsung USA on twitter...well see what they say

Sent from my SAMSUNG-SM-N900A using Tapatalk

 

[Sonnydigs]

Not sure what this all means but here is what I got on AT&T, N-3....

 

[mavrrick]

Yea. I have to ask.
1. Is this a ATT NOTE3.
2. Is it rooted or have anything done to change the firmware from stock.

 

[Sonnydigs]

Yea. I have to ask.
1. Is this a ATT NOTE3.
2. Is it rooted or have anything done to change the firmware from stock.

Yes, Note-3..
No rooting, totally stock..

 

[mavrrick]

Yes, Note-3..
No rooting, totally stock..

Actually I was referring to the OP. I ran the scanner from the Lookout folks and it says pretty much the same thing. Yes my Note 3 has a effected version, but the feature the exploit uses is not enabled.

 

[Almeuit]

Checked mine. It isn't enabled so I am okay.

T-Mobile Note 3 running 4.3 still.

Sent from my T-Mobile Note 3 using AC Forums.

 

[dpham00]

Checked mine. It isn't enabled so I am okay.

T-Mobile Note 3 running 4.3 still.

Sent from my T-Mobile Note 3 using AC Forums.

Same on my Verizon

dpham00, Android Central Moderator
Sent from my Verizon Samsung Galaxy Note 3 via Tapatalk Pro

 

[H3aTeRzz]

How to protect yourself from the 'Heartbleed' computer bug | On Air Videos | Fox News

 

[mavrrick]

Very interesting video. Very miss leading though. It is a big problem but that is sensationalism at its best. The guy doesn't have a clue, the women is a little bit better, and the text on the screen seemed most accurate. Which do you think got most people's attention.

The guy makes it seem no one is secure and everything is wide open.

Oh well.

Posted via Android Central App

 

[daviddlt]

Samsung has yet to answer my question...sigh

Sent from my SAMSUNG-SM-N900A using Tapatalk

 

[mavrrick]

The phone isn't vulnerable. If you look at the several subsequent post the feature in question is disabled by default. You only need to worry if you are using a custom ROM and the person that made it, turned it on.

This is also a server side exploit, not client side.

Posted via Android Central App

 

[Nana Helen]

Probably a dumb question, can PC's be affected by this virus? I know it can't get into Apple devices, but some of my apps i have on my phone, tablet & PC. Like AC Forums,Evernote etc

Sent from my GT-I9100 using AC Forums mobile app

 

[Gary02468]

Probably a dumb question, can PC's be affected by this virus?

That's off-topic. This forum is about AT&T Note 3s, not about Heartbleed on PCs. (Also, Heartbleed isn't a virus.)

 

[Nana Helen]

That's off-topic. This forum is about AT&T Note 3s, not about Heartbleed on PCs. (Also, Heartbleed isn't a virus.)

Sorry didnt know what SSL meant & couldnt find anything else.

Sent from my GT-I9100 using AC Forums mobile app

 

[mavrrick]

Sorry didnt know what SSL meant & couldnt find anything else.

Sent from my GT-I9100 using AC Forums mobile app

SSL or Secure Sockets Layer is one of the main method for any computer to create a secure connection. That includes Apple. The key here is what version of SSL are they using and is the heart beat functionality turned on. The Note seems to be a great example of a device having the effected openSSL code but not using the feature so it is still safe.

Posted via Android Central App

 

[mavrrick]

Probably a dumb question, can PC's be affected by this virus? I know it can't get into Apple devices, but some of my apps i have on my phone, tablet & PC. Like AC Forums,Evernote etc

Sent from my GT-I9100 using AC Forums mobile app

This isn't a virus but a software bug. Any computer device mobile, pc, apple, Linux, tablet could be effected if it uses the effected version of OpenSSL and had that heart beat feature turned on.

Posted via Android Central App