{"id":1532,"date":"2015-08-16T11:52:33","date_gmt":"2015-08-16T16:52:33","guid":{"rendered":"https:\/\/sodpit.com\/?p=1532"},"modified":"2017-12-23T02:03:06","modified_gmt":"2017-12-23T08:03:06","slug":"stagefright-the-end","status":"publish","type":"post","link":"https:\/\/sodpit.com\/?p=1532","title":{"rendered":"Stagefright… The End?"},"content":{"rendered":"

\"stagefright_v2_breakdown-e1438001259526-1024x266.jpg\"<\/a><\/p>\n

I’m hoping this will be my final post on the Stagefright Hack\/Bug.<\/p>\n

<\/p>\n

Update<\/strong><\/p>\n

Zimperium Inc. updated their\u00a0Stagefright Detector App<\/a>\u00a0for Android. You should make sure to keep this app updated and occasionally check your device to see if any recent upgrades for your operating system might have fixed this problem.<\/p>\n

So check this out<\/span><\/a>, if your device is patched then you can whichever\u00a0messaging app you like best and you can re-enable the auto-retrieve setting for MMS messages.<\/p>\n

New Mitigation Method… Much Better!<\/strong><\/p>\n

In previous posts\u00a0I mentioned disabling the auto-retrieve setting for MMS messages. This is somewhat effective but overwhelmingly annoying, especially for users who receive a lot of group or picture messages. I’m tired of having to tap “Download” 20 times a day.<\/p>\n

I have recently found two third-party SMS\/MMS applications that either don’t use the Stagefright engine or are somehow protected from the Stagefright exploit.<\/p>\n

If your phone hasn’t been upgraded to a proven SAFE\u00a0version that has the patched Stagefright engine I strongly recommend installing and using either of these as your primary messaging app:<\/p>\n

Textra SMS Android App<\/a> (free but offers in-app purchases) \/\u00a0Textra SMS Website<\/a><\/p>\n

QKSMS Quick Text Messenger Android App<\/a> (free but offers in-app purchases) \/\u00a0QKSMS Google+ Community<\/a><\/p>\n

I have tested and use both interchangeably. They are both decent and effective and I no longer have to click a stupid download button.<\/p>\n

There might be other SMS\/MMS solutions out there that protect you from the Stagefright problem, these are just a few suggestions that I know work. If you find any, let me know!<\/p>\n

Stagefright Patch Status<\/strong><\/p>\n

I have created a spreadsheet (not intended to be exhaustive by any means) which shows the current status of some phones that are patched (or not):\u00a0Stagefright Patch Status<\/a>.<\/p>\n

Another tab on this spreadsheet\u00a0shows a comparison between Apple iOS and Google Android for\u00a0Common Vulnerabilities And Exposures (CVEs): CVE:\u00a0Apple iOS vs. Google Android<\/a>.<\/p>\n

\"\"<\/a><\/p>\n

The summary is that there are 10 times as many vulnerabilities in iOS and most of them were more severe than the Android exploits.\u00a0Apple iOS had 537 CVEs from 2007 to 2015<\/a>.\u00a0Google Android had 54 CVEs from 2009 to 2015<\/a>.<\/p>\n

Recently an (supposed)\u00a0Android fan told the world he was finally saying goodbye to Android and switching to an iPhone<\/a>, a hasty decision in my opinion. As the CVE comparison above shows, even though\u00a0Apple might currently be the quickest to patch problems, they are still 10 times more likely to wind up with\u00a0problems in the first place – and subsequently they are more vulnerable to attacks; most of which are also much more severe.<\/p>\n

In closing, the Stagefright Bug really bothered me and it still does… but in my opinion there are no safer or better solutions than Android right now.<\/p>\n","protected":false},"excerpt":{"rendered":"

I’m hoping this will be my final post on the Stagefright Hack\/Bug.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[4],"tags":[],"class_list":["post-1532","post","type-post","status-publish","format-standard","hentry","category-main"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p2FmUa-oI","jetpack_likes_enabled":false,"_links":{"self":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts\/1532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1532"}],"version-history":[{"count":3,"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts\/1532\/revisions"}],"predecessor-version":[{"id":1598,"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts\/1532\/revisions\/1598"}],"wp:attachment":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}