Tag Info

New answers tagged

4

This is not only about MMS or web surfing, since Stagefright is the library that helps phones to unpack multimedia messages: see Media and this article on Fortune. So it is about any application (including your web browser) that works with multimedia (video clips and audio records). MMS is just an easiest way to exploit it, because your phone will not ask ...


0

With respect to MediaTek's "Common Data Service" I worry about it. Reviewing what rights it has in... [Menu button -> Manage Applications -> Common Data Service] shows that it has all rights, basically. And I've just setup the ADB (Android Debug Bridge), connected my phone to my computer and ran the following command from a prompt: adb shell am start -a ...


1

For a smartphone, you can expect security updates to be supported for 18-24 months. Google says Nexus devices receive updates for 18 months. Nexus devices may not receive the latest version of Android if they fall outside of the update window, which is usually around 18 months after a device has been released. The Nexus line is nominally supposed to ...


0

It depends on your manufacturer and carrier to deliver the update. My guess is that it would only be the newest models or this past year's flagships that would be updated in a reasonable amount of time. If you have the understanding and really want the update, I know many of the custom ROM's will be updated well before any of the carrier stock images. I ...


0

As far as I know, no 3rd party app can record your "keystrokes" when installed on a non-rooted android phone. When an app gains privilege and is given root access, only then it could act like a system app on a rooted phone. This is why Google has never given root access to users. It's too risky. Anybody can install a spyware "keylogger" app on your non ...


3

The newest version of Hangouts mitigates this issue, it looks like it does some extra checks before passing the media on to the system service. It doesn't fix the underlying issue in the system, though. You can also disable MMS auto-retrieve in Hangouts via its Settings → SMS → uncheck Auto retrieve MMS or in Messenger via its Settings → ...


3

Most likely, a lot of Android devices will not receive the update. Only devices that have received updates recently from the manufacturer (Such as Samsung GS6) are likely to receive the security patch. Device like mine (LG Optimus Fuel/Zone 2) that have never received updates for any reason, will most likely be left vulnerable to the security issue. I am ...


1

Nicolas, possible solutions very much depend on how far you will go (and partly, how far your carrier goes along). There is no 100% cure, but a few items you might consider: Say Goodbye to Hangouts. If you can live without that app, make another one the default SMS/MMS handler and don't use Hangouts – at least not until Google fixed that "autoplay". I'd ...


0

Don't use or disable autoloadind MMS in hangouts (Don't know the procedure myself since I don't use it). The patch was already commited in AOSP around two weeks ago so for a fix for this "new exploit" if you use an OEM rom, you should contact your carrier/vendor. Any custom rom like Cyanogenmod should already have this fixed. ...


1

This issue affects web surfing too. Try disabling media.stagefright-related properties (if exists) in build.prop configuration file. Mount root partition as rw and edit build.prop. Set media.stagefright.enable-### to false Note: this requires root access.


6

To mitigate this attack, I've disabled MMSes, since I don't use them anyway. You can do that in the Settings menu. Select Cellular Networks > Access Points Names, select your access point, and remove "mms" from APN Type. I've also cleared out MMSC. (Click image to enlarge; hover the image to know the instruction) Order of Instructions: Follow images from ...


3

On Nexus devices, at least: CF Auto-Root works by unlocking the device's boot loader via fastboot (if it isn't already unlocked), then sending the device a custom boot image (kernel and ramdisk) that it should run instead of booting from the built-in system or recovery partition. It's analogous to booting your PC from a CD or USB drive instead of from the ...


1

Depending on your device and version of android you are running. You can goto Settings > Security > Device Administrators. Then uncheck the box for Microsoft Outlook App. That should allow you to go back to "none" for unlocking. Not sure how it would affect the app.


1

Check if you have added VPN connections. Usually VPN connection requires minimum Pattern/PIN/Password active, and while you have VPN connection created you can't disable it. To check does you have it, and to delete it go to Settings -> More under Wireless & Networks-> VPN. Keep in mind, this can be different on other Android version, you can search ...


1

The Android Device Manager will probably still work, provided the new ROM contains the GApps. But it won't listen to you any longer. If, as you describe in your question, the "new holder" is from the tech field, and did a thorough wipe plus installs a new ROM, nothing from your installation survives. It simply can't, with really all storage ...


-1

I have solved it myself by deleting password.key from /data/system using Root Explorer running on a second account.


-2

If you are talking about the Samsung keyboard, which was derived from SwiftKey, DROP EVERYTHING AND RUN! Just kidding. Although you might want to take off your data and reset your phone. If you think you are vulnerable, STOP USING THE DEVICE. Samsung keyboards are baked into the ROM. There has been reports, and ugly ones too: even if you disable the ...


-1

go to Systemandroid then MXGKJHzyoi== like folder then .image contains photos and .video contains videos. Hexedit any file from .image folder and find data starting from FFD8 AND FFD9 IS end . and save as jpeg. you can see all images.


-1

Try this Its an apk that can disable the screen lock. It worked for me on KitKat when I had the same problem. Install it, select launcher and don't mind the icon.



Top 50 recent answers are included