Stagefright patch vulnerable to stagefright

[jos]

Last week Google, Samsung, LG and other major smartphone manufacturers promised to patch the Stagefright vulnerabilities promptly, and some of them have already started to send the fixes over the air. After the patch was sent to the Nexus 5, the researcher managed to create an MP4 file that would bypass the patch, and he received a crash message, which points to some level of success. And need patching

 

One good thing came is another update for Android 4.0 and later versions received support for a security feature called address space layout randomization (ASLR), which makes it much harder for attackers to insert malware into Android devices. but the newly discovered Stagefright needs to be patched again, 

 

Apple, Microsoft and even the fragmented "Linux" ecosystem all have a much better security update model than Android has right now. In the Android ecosystem, the model seems to be companies fixing stuff whenever they feel like it, and if they feel like it. That's a model that certainly can't scale to billions of users -- not without leaving a majority of them always vulnerable to some bug or another.

 

 

There should be a system through which small updates gets installed automatically like in desktop windows..

Source: http://www.tomshardware.com/news/android-update-system-needs-fixing,29848.html

[qwertywarrior]

There should be a system through which small updates gets installed automatically like in desktop windows..

Source: http://www.tomshardware.com/news/android-update-system-needs-fixing,29848.html

there is

it has already been implemented in 5.0

[LAwLz]

That's just embarrassingly bad. Google needs to do something about updates on Android. An updating system like on Windows would be ideal, but it seems like there is something about phones and other ARM devices which doesn't make it possible.

Cyanogenmod has apparently already patched it though. So at least people running that will be safe (and a few hundred million devices unsafe...).

 

By the way, this security hole seems to exists because of DRM. Just another reason why we need to get rid of the cancer that is DRM.

[jos]

there is

it has already been implemented in 5.0

It  has not.

Only the web rendering engine used by apps gets updated, if you use google proprietary engine called google web view. 

In Linux desktop even kernels are updated regularly

[sof006]

My device is immune to stagefright Android 5.1.1 (custom ROM) is immune to stagefright.