If any of you dollfuckers use android phones...

skate323k137

Professional College Dropout

10 Year Member

Joined

Jan 7, 2013

Posts

4,227

• Jul 28, 2015

• #1

disable auto MMS retrieval. right meow.

https://www.twilio.com/blog/2015/07/how-to-protect-your-android-device-from-stagefright-exploit.html

Until the patches hit the OS, your phone can be owned from a fucking MMS message.

 

F

FilthyRear

Neo-Geo.com's, Top Rated Bully.,

15 Year Member

Joined

Jan 24, 2007

Posts

8,152

• Jul 28, 2015

• #2

Thanks for this.

 

Jarofmayo

Morden's Lackey

Joined

Apr 3, 2013

Posts

369

• Jul 28, 2015

• #3

Thanks for the heads up.

 

max 330 mega

The Almighty Bunghole

15 Year Member

Joined

Dec 14, 2004

Posts

4,300

• Jul 28, 2015

• #4

im just over here chillin with my waterproof flip phone...

 

BeefJerky

Foreman of Jewish Tunnels

20 Year Member

Joined

Mar 19, 2001

Posts

10,616

• Jul 28, 2015

• #5

I'm glad I went through and turned all that kind of shit off when I first got this phone. I don't like these things doing so much by themselves...

 

skate323k137

Professional College Dropout

10 Year Member

Joined

Jan 7, 2013

Posts

4,227

• Jul 28, 2015

• #6

Wise beyond your years, beff

 

joecommando

Amusaka's Lacky

10 Year Member

Joined

Jun 22, 2010

Posts

970

• Jul 28, 2015

• #7

max 330 mega said:

im just over here chillin with my waterproof flip phone...

Click to expand...

exactly dude, my phone is too ghetto awesome to get this.

 

BeefJerky

Foreman of Jewish Tunnels

20 Year Member

Joined

Mar 19, 2001

Posts

10,616

• Jul 28, 2015

• #8

skate323k137 said:

Wise beyond your years, beff

Click to expand...

SRS man, I bought a refurbed Galaxy S3 a few months ago, never had a phone with the front-facing camera before. There's a fucking option in Android for it to recognize if someone is looking at the screen to keep it from locking... IT KNOWS WHEN YOU'RE LOOKING AT IT. IT IS LITERALLY WATCHING YOU. I'm not a luddite, but stuff like that makes me feel a bit uneasy.

 

Endlessnameless

They call me Gringo,

Joined

Feb 5, 2008

Posts

854

• Jul 28, 2015

• #9

Thank you for this. Been hearing about this but wasn't sure how to mitigate damage.

 

SmokeMonster

Morden's Lackey

Joined

Jan 25, 2014

Posts

365

• Jul 28, 2015

• #10

Same here, thanks for the link Skate.

 

Tripredacus

Three 6 Mafia

10 Year Member

Joined

Mar 1, 2012

Posts

5,468

• Jul 29, 2015

• #11

Old exploit is old. Besides...

So, we have a complete operating system, running on an ARM processor, without any exploit mitigation (or only very little of it), which automatically trusts every instruction, piece of code, or data it receives from the base station you're connected to.

Click to expand...

http://www.osnews.com/story/27416/The_second_operating_system_hiding_in_every_mobile_phone

 

skate323k137

Professional College Dropout

10 Year Member

Joined

Jan 7, 2013

Posts

4,227

• Jul 29, 2015

• #12

This exploit is not old. The concepts used to find it may be old, but the vulnerabilities disclosed were just discovered.

 

Tripredacus

Three 6 Mafia

10 Year Member

Joined

Mar 1, 2012

Posts

5,468

• Jul 29, 2015

• #13

skate323k137 said:

This exploit is not old. The concepts used to find it may be old, but the vulnerabilities disclosed were just discovered.

Click to expand...

SMIL exploitation is the oldest of the old regarding MMS. Anyways, this article is a FUD and does not deserve the outrageous press it is getting. Greater vulnerabilities garner less press attention.

 

skate323k137

Professional College Dropout

10 Year Member

Joined

Jan 7, 2013

Posts

4,227

• Jul 29, 2015

• #14

It's remote code execution through MMS that the user (by default) doesn't even have to open. Hardly FUD. it's a legitimate vuln.