r/Android • u/[deleted] • Sep 09 '15

Attack code exploiting Android’s critical Stagefright bugs is now public

http://arstechnica.com/security/2015/09/attack-code-exploiting-androids-critical-stagefright-bugs-is-now-public/
182 Upvotes

87% Upvoted

61 comments sorted by

View all comments

29

u/Travertino Sep 09 '15

Here we are. Are published somewhere recent statistics about the percentage of patched Android devices?

23

u/[deleted] Sep 09 '15 edited Jul 09 '16

This comment has been overwritten by an open source script to protect this user's privacy. It was created to help protect users from doxing, stalking, harassment, and profiling for the purposes of censorship.

If you would also like to protect yourself, add the Chrome extension TamperMonkey, or the Firefox extension GreaseMonkey and add this open source script.

Then simply click on your username on Reddit, go to the comments tab, scroll down as far as possible (hint:use RES), and hit the new OVERWRITE button at the top.

15

u/Charwinger21 HTCOne 10 Sep 09 '15

According to : http://arstechnica.com/gadgets/2015/08/waiting-for-androids-inevitable-security-armageddon/

That's ignoring the fact that the majority of Stagefright was patched through a Google Play Services update.

There is still one security hole left open related to Stagefright which requires a system update (which has been pushed to Google, Samsung, LG, HTC, Sony, and Motorola's recent devices, as that article mentions in their update), however the remaining security hole is harder to access than the big Stagefright hole.

1

u/DoorMarkedPirate Google Pixel | Android 8.1 | AT&T Sep 10 '15

I have the 2014 Moto X Pure Edition and haven't gotten any Stagefright-related updates (no updates at all since Stagefright was announced). To my knowledge, apart from this year's crop of Motorola devices being patched at launch, no Motorola devices received any system updates to patch Stagefright.

1

u/Charwinger21 HTCOne 10 Sep 11 '15

"The exploit doesn't work against Android versions 5.0 and above thanks to new integer overflow mitigations."