G+_Marlon Thompson Posted August 7, 2015 Share Posted August 7, 2015 I am surprised no one shared this article by Ron Amadeo yesterday http://arstechnica.com/gadgets/2015/08/waiting-for-androids-inevitable-security-armageddon/. Yes its the usual take no prisoners approach that even had Kirill Grouchnikov write an article about the 1 pixel misalignment in the Google Play app that Ron pointed out http://www.pushing-pixels.org/2015/08/04/off-by-a-pixel.html (talk about #pixelpushing) . And while I don't agree with him that we need to burn it all down, some changes need to be made and the carriers and OEMs know this, and we have to let them know we are watching. http://arstechnica.com/gadgets/2015/08/waiting-for-androids-inevitable-security-armageddon Link to comment Share on other sites More sharing options...
G+_Alan Char Posted August 7, 2015 Share Posted August 7, 2015 There's lots of good discussion in the comments to Ron Amadeo 's G+ post: https://plus.google.com/+RonAmadeo/posts/RadCo5N9zbB Link to comment Share on other sites More sharing options...
G+_Luke Meiritz-Reid Posted August 7, 2015 Share Posted August 7, 2015 Old News .. .. Link to comment Share on other sites More sharing options...
G+_L I Posted August 7, 2015 Share Posted August 7, 2015 I feel like Amadeo glossed over the point about ALSR protecting 90% of users. That needs a bit more explanation. Is he writing this out of fear? Is this an article he would have written a month ago? Link to comment Share on other sites More sharing options...
G+_L I Posted August 8, 2015 Share Posted August 8, 2015 From The Verge, no less: http://www.theverge.com/2015/8/5/9099627/google-stagefright-android-vulnerability-protect-patch "At the same time, Android mitigation efforts are making vulnerabilities harder and harder to exploit. Even in its current form, Stagefright has had trouble getting around Android's Address Space Layout Randomization protections (commonly known as ASLR). The bug can still be used to trigger unauthorized code — a troubling result under any circumstances — but ASLR system has made it difficult to reliably run any specific piece of code across a range of devices, a difficulty acknowledged by Drake himself." Link to comment Share on other sites More sharing options...
G+_Luke Meiritz-Reid Posted August 8, 2015 Share Posted August 8, 2015 Lionel D Good Grief .. Charlie Brown Link to comment Share on other sites More sharing options...
Recommended Posts