Optimus V Rom question

[denshigomi]

Your solutions would have done absolutely nothing and did absolutely nothing about this exploit. NONE.

I'm really at a loss; I have no idea what you mean by that statement.
Do you mean my solutions won't protect people in the future from DroidDream, or do you mean they wouldn't have prevented the original outbreak? Perhaps you're saying both?
No matter how I interpret your comment, I keep wondering why you dismiss upgrading to Gingerbread. It's immune to the vulnerability used by DroidDream. Yet you seem to be condemning that as false, when it is known to be true.

At any rate, I see no value in examining hypothetical time travel scenarios, if that was your intent. I am interested in avoiding future infections.

It was a developer that noticed and then alerted google. Lookout was the first to respond to the news and took action in including the files to the scan process.

Yes, and so my solution to install Lookout's security software will prevent future infection. Yet you claim it will do nothing about the exploit. I find your stance baffling.

No Im not confused. I have discussed this before. And it has been discussed before. The file listed here is basically the same as the one google pushed.

The file Google pushed cleans an infected phone and does not create a dummy file.
The patch file we are discussing here is not intended to clean an infected phone. It is intended for an already clean phone to prevent infection by creating a dummy file.
The two are not similar in content or operation.

This is wrong info being distributed. Yes there is no patch, yes gingerbread patched the exploit. BUT no security software is 100% fail safe. Again I direct you to the fact NONE of them even detected the exploit. And just because they are watching it now, as you gave a example of, it doesnt mean somebody couldnt find a new way to run the exploit and bypass the "security" software you are adamantly pushing.

I never claimed there was security software that is 100% fail safe.
Is this the basis for your opening comment?
There is a considerable amount of middle ground between doing absolutely nothing, and being 100% fail safe.

 

[LeslieAnn]

Calling it a malware patch is not my name for it, that was what it is called.
(Note: was actually a patch called malware block)
Found here:
http://forum.androidcentral.com/opt...-patch-malware-block-3-6-11-froyo-only-2.html

You all should probably direct this to the appropriate thread (the one listed above) instead of tying up this one.

 

[Eollie]

denshigomi initially I was going to address your post. But after realizing you have good intentions, no matter how you choose to present them, I find engaging you is like wrestling with a pig in the mud.

But Google can’t automatically patch the security problem that made the malware possible in the first place. Phone companies and phone makers have to distribute the patch to their users. They can take Google’s patch and push it to users.

Hmm google gave a patch that was suppose to fix the security hole, but left it up to carriers and manufacturers to push it.

 

[Delphis]

Hmm google gave a patch that was suppose to fix the security hole, but left it up to carriers and manufacturers to push it.

So, the question remains, is there an ACTUAL patch for custom kernels. Using a blank file is not the same thing as patching the exploit. I don't know why you're arguing with denshigomi about it.

 

[Eollie]

So, the question remains, is there an ACTUAL patch for custom kernels. Using a blank file is not the same thing as patching the exploit. I don't know why you're arguing with denshigomi about it.

To truly "patch" the exploit you have to upgrade to 2.3. that is where word choice is vital. There is a simple fix in the patch listed in the other post. WIth so many phones using a variety of hacked and patched versions of android 2.0 I would take a hard guess that there is no real one size fits all patch outside of the simple creating a profile that causes the exploit to "think" its already been done.

My whole point in this was posting your "thought" on something and then calling what the community has put out to deter and help prevent as "crap" is counterproductive to the community. Some people ignore these kinds of things, me I think it akin to biting the hand that feeds. I mean as I said denshigomi has good intentions, but his presentation and replies were not optimal. Neither were mine, however I tend to post at the level I feel Im responding too.

 

[denshigomi]

My whole point in this was posting your "thought" on something and then calling what the community has put out to deter and help prevent as "crap" is counterproductive to the community. Some people ignore these kinds of things, me I think it akin to biting the hand that feeds.

I am glad you posted this. Now I have a better understanding of where you are coming from.
I apologize for referring the patch which creates an empty file named /system/bin/profile, "CrapPatchDD". I was attempting to be humorous. I did not think it would elicit a negative emotional response.
I respect your opinion, but I stand by mine. When dealing with security, I call a spade a spade, regardless of who made it.

Putting aside my poorly placed attempt at humor, I believe an unwillingness to sincerely discuss matters which affect the community is also counterproductive. I welcome others to share their opinions with me, especially when they are contrary to my own, so I might expand my perspective.

...[denshigomi's] presentation and replies were not optimal. Neither were mine, however I tend to post at the level I feel Im responding too.

I do not take offense at this statement, but I would like you to consider how you might feel if someone insinuated that speaking with you caused them to stoop.

 

[Eollie]

I do not take offense at this statement, but I would like you to consider how you might feel if someone insinuated that speaking with you caused them to stoop.

Touche' haha

I also take the security of my valuables serious. I however tend to trust some people in the android community that aren't on the radar or have fallen off. They are the people I go to for answers. Although they are focused on the high end devices and our optimus isn't on their radar until I start poking them lol. But for the most part the security holes exist on all devices so again I trust what they tell me.

 

[JimReid]

Rom rundown...

Rodimus was the first rom to come along and is still actively developed. Today, it is a highly tweaked rom with various themes and enhancements (with Virgin junk removed). It is now based on or is similar to Stock + Xionia. It has the best battery life and is one of the best in terms of performance for the Optimus V.

Stock + Xionia is kind of the granddaddy (even if it actually came along second), it's stock Virgin, minus the virgin junk and a tweaked kernel that allows overclock. This rom is important in that it was the first to have a different kernel and is still the basis for many 2.2 roms for the V. It also showed a glimpse of what the V was truly capable of in terms of performance. The kernel was built by Zefie for the Optimus S and was tweaked by RevolutionRed for use in this rom. This rom is still the same as it was when released. While not the fastest or most efficient today, it does outrun the stock rom/kernel by miles in both speed and battery which is why the faster 2.2 roms are still using this as a base. The dev has been busy with school, Aphrodite sort of carries the torch for it.

Aphrodite is built right on top of Stock + Xionia and was more or less an effort to continue what Stock + Xionia started with a different kernel, and stripping out even more things. This rom is relatively new compared to the above, but has been aggressively developed to accomplish a lot quickly, without Rodimus and Stock + Xionia, it wouldn't exist. Created as a personal rom for myself, it evolved quickly. There are now three versions, one with stock kernel (Extra Virgin), another with Xionia 005 (v.1.3.3), and another with 008 (version 2.0, a beta had kernel 013). Version 1.3.x ranks as the fastest and smallest Froyo rom, and one of the best in terms of battery life (1.3.3 should be pretty close to Rodimus for battery life now). There is NO them, in fact, this is so stripped that it does not even contain a boot animation or even many Google apps (get the apps from the Market). It's just a very basic froyo. All current Aphrodite roms include as many up to date apps as possible and even has the malware patch built in (this should be done after any froyo/2.2 rom flash unless built in). Version 1.3.3 is stable, while version 2.0 is kernel progressive, so it may not always be the most stable or fastest rom out there.

Mobius is a work in progress to create a completely new kernel. This is not complete I believe.

Mmmark111, creator of Rodimus also put together a Cyanogen6 rom, which is a work in progress, I'm not sure of the status. It was put together in non-working form so others could take up the project. This is not yet a working rom to my knowledge.

There is also Pure Android, there isn't much known about this one, seems the creator has abandoned it. I do know it has some tweaks that are known to cause problems on occasion (stagefright). It also has some remapped keys (on purpose) and a new boot animation.

Zomg! Rom is a themed rom that uses the stock kernel, ADW launcher, a new video player, and removed Virgin junk. Like Aphrodite, it too does not have any Google Apps.

Wait That Ain't Sense is another themed Rom which simulates the Sense UI. It is cleared of Virgin apps and the stock kernel.

There is also a completely Stock Virgin rom available.

Then you have the 2.3 roms AOSP and Zefies. Zefies is a bit behind at this point. Both use Cyanogen as the base, native wifi tethering does not work, you have to use an alternative and MMS is broken.

Update: AOSP has working native tethering, but minor BT issues.

LeslieAnn,

If you get a minute could you tell me which is the most stable. I am new to Androids (old windows guy) and am just learning. I did root my Optimus V and that helped but I think I need a new ROM that will allow me to move more to the SD Drive. (and the Virgin Mobile stuff)

Also, where do you get the ROM's etc and directions to install. I did get a ROM manager and backed up everything and I have tried MoveToSD and Move2SDEnabler but still am having problems with not enough memory. And a lot of apps won't move yet. Still running the standard Virgin Mobile ROM.

Any help would be appreciated.

Thanks,

Jim
JimReid@comcast.net

 

[pandacookie]

\
Also, where do you get the ROM's etc and directions to install.]

You asked about this in another forum. If you hop on over there you will find an answer to your question.

 

[LeslieAnn]

Wow, necro thread.
There is only two currently developed roms at this point. IHO, which has several people building it, and Harmonia.

All others have fallen by the way side and abandoned.
Look down the forum page, both are listed there.

The most stable is Harmonia, as IHO is still in development, however it's still very stable. Harmonia came from good "breeding stock" and has had months of development, no other OV rom has that.

Wait for my corrected Harmonia though as 1.5 has one bug (due to an installer change), that is eating the extra memory space. I hope to have it up later today. How to install is in the links at the top of the rom forum.