New MMS vulnerability in Android found

[kevm14]

http://www.theverge.com/2015/7/27/90458 ... ploit-hack

Good luck patching older phones.

[Adam]

http://www.theverge.com/2015/7/27/90458 ... ploit-hack

Good luck patching older phones.

Or even newer phones.

[Adam]

http://blog.zimperium.com/experts-found ... f-android/
Blog posting from the guys who found it.

[kevm14]

If ‘Heartbleed’ from the PC era sends chill down your spine, this is much worse.

Nice, if a bit dramatic.

[Adam]

Effects every Android phone running 2.2 or newer. Mozilla's Firefox OS is fixed as of v38. SilentCircle’s Blackphone is patched as of v1.1.7. That's it, though. It isn't in the AOSP baseline yet.

These guys are presenting information about this during Black Hat this year, which starts August 5th. I will post an update with a link to the presentation when this happens.

[Adam]

Correction: the Mozilla issue was in the Firefox browser, which uses the same library for stuff.

Update: Google is pushing out patches for Nexus devices. In addition, they are looking to implement monthly patches.
https://threatpost.com/google-plans-mon ... nes/114148

[Adam]

Black Hat talk:
https://www.youtube.com/watch?v=71YP65UANP0