We all know of the Stagefright exploit (and the patch that SEEMINGLY fixed it even though its still vulnerable). A lot of AOSP based roms have placed a patch inside of their firmware, and some manufacturers have sent software updates to their devices (the M8 and M9 rumored to get the update this month) What I'm trying to ask is, would it possibly be safer to go S-OFF and get an AOSP-based ROM or stay on stock Sense and wait for the August update, of which we do not know that it will solve the problem entirely? I used the Stagefright detector for Stock S-On on my M8 and it was vulnerable to every bug except one.
People are panicking too much !
Mr Hofs said:
People are panicking too much !
Click to expand...
Click to collapse
I'm not really panicking, I was just wondering which option would be better for the time being. I'm confident the Stage fright will be solved before we deal with Android M.
Sent from my HTC6525LVW using XDA Free mobile app
TheForceUnleashed said:
I'm not really panicking, I was just wondering which option would be better for the time being. I'm confident the Stage fright will be solved before we deal with Android M.
Sent from my HTC6525LVW using XDA Free mobile app
Click to expand...
Click to collapse
The option which is better is the one you choose ! If YOU think it's better to switch to a rom with the stagefright patch than do it. I am on a custom rom without the patch and turned off mms auto retrieve options. Enough for me. I think it's also a bit blown up by the media. If a similar situation was happening like 15 years ago we wouldn't even know about it like we do now. Media and especially social media is very aggressive in these situations.
Cheers
TheForceUnleashed said:
We all know of the Stagefright exploit (and the patch that SEEMINGLY fixed it even though its still vulnerable). A lot of AOSP based roms have placed a patch inside of their firmware, and some manufacturers have sent software updates to their devices (the M8 and M9 rumored to get the update this month) What I'm trying to ask is, would it possibly be safer to go S-OFF and get an AOSP-based ROM or stay on stock Sense and wait for the August update, of which we do not know that it will solve the problem entirely? I used the Stagefright detector for Stock S-On on my M8 and it was vulnerable to every bug except one.
Click to expand...
Click to collapse
Stagefright works through SMS/MMS on Hangouts. Go to your Hangouts settings and turn off "Auto Retrieve MMS" and only download them from people you trust. Problem solved.
ok...i'm not using Hangouts...is deleted from my phone...cool
auto retrieve mms is only one vector of attack. you'll still need the patch. as far as I can tell, htc will be releasing the patch this week.
---------- Post added at 12:05 PM ---------- Previous post was at 12:04 PM ----------
xunholyx said:
Stagefright works through SMS/MMS on Hangouts. Go to your Hangouts settings and turn off "Auto Retrieve MMS" and only download them from people you trust. Problem solved.
Click to expand...
Click to collapse
nope.
xunholyx said:
Stagefright works through SMS/MMS on Hangouts. Go to your Hangouts settings and turn off "Auto Retrieve MMS" and only download them from people you trust. Problem solved.
Click to expand...
Click to collapse
Other message apps are also vulnerable, including the stock Messages app, and any 3rd parting messaging apps with the auto-retrieve function.
---------- Post added at 01:16 PM ---------- Previous post was at 01:14 PM ----------
bleggy said:
auto retrieve mms is only one vector of attack. you'll still need the patch.
Click to expand...
Click to collapse
Also the most likely vector. I've seen some discussions on XDA that any app that uses the Stagefright api is vulnerable, such as video players. But how would such an attack be triggered, if not by a message? I'm not just asking to be critical, but as a legit question; as I'm not a developer, so such an attack may well be possible for all I know.
The solution to turn off auto-retrieve is a good idea, until the OS is patched. Its certainly better than doing nothing.
Related
I've been wanting to install CM for a while now, but after looking around it seems that the camera related stuff is very dependant on some proprietary stuff so it tends to freeze on CM and cause the phone to reboot - does that happen very often? I believe it should be stable on milestone versions, but I just want to double check.
amerkiller1995 said:
I've been wanting to install CM for a while now, but after looking around it seems that the camera related stuff is very dependant on some proprietary stuff so it tends to freeze on CM and cause the phone to reboot - does that happen very often? I believe it should be stable on milestone versions, but I just want to double check.
Click to expand...
Click to collapse
Well I'm not sure what you have been reading but the camera issue does not force the phone to reboot. You do however have to rebooted yourself if it fails to connect.
However there is a fix/workaround on Google play, just remember to follow instructions or it wont work...
https://play.google.com/store/apps/details?id=com.billgbennett.camerafix&hl=en_GB
I use Google Camera (As I like photosphere) and whenever I get the "cant connect" issue I use this and it launches fine
TheATHEiST said:
Well I'm not sure what you have been reading but the camera issue does not force the phone to reboot. You do however have to rebooted yourself if it fails to connect.
However there is a fix/workaround on Google play, just remember to follow instructions or it wont work...
https://play.google.com/store/apps/details?id=com.billgbennett.camerafix&hl=en_GB
I use Google Camera (As I like photosphere) and whenever I get the "cant connect" issue I use this and it launches fine
Click to expand...
Click to collapse
Yes, that's what I meant, good to hear it's sorted.
Am I right in thinking that CM based on Lollipop is several months away? I thought about waiting but if that's the case then I think I'll go with CM11.
amerkiller1995 said:
Yes, that's what I meant, good to hear it's sorted.
Am I right in thinking that CM based on Lollipop is several months away? I thought about waiting but if that's the case then I think I'll go with CM11.
Click to expand...
Click to collapse
Could be yes but you will likely see other nice AOSP based roms before then.
http://forum.xda-developers.com/galaxy-s3/themes-apps/17-fixed-camera-app-lib-cm-aosp-roms-t2505973
Try version 4 of this fix for cm. After flashing i had "can't connect" error completely gone.
Still i find photo quality much worse than stock rom.
maelfilk said:
http://forum.xda-developers.com/galaxy-s3/themes-apps/17-fixed-camera-app-lib-cm-aosp-roms-t2505973
Try version 4 of this fix for cm. After flashing i had "can't connect" error completely gone.
Still i find photo quality much worse than stock rom.
Click to expand...
Click to collapse
What if you use alternative camera apps (eg. Google Camera), is it still worse?
amerkiller1995 said:
What if you use alternative camera apps (eg. Google Camera), is it still worse?
Click to expand...
Click to collapse
Yeah, what i mean is camera on non-stock roms is just way worse, afaik it's driver related problem.
---------- Post added at 03:08 PM ---------- Previous post was at 03:04 PM ----------
For a while now i've been using stock-based. May be any one could share some photos (day- and night-time) taken on cm/pa/other custom rom for comparison.
maelfilk said:
Yeah, what i mean is camera on non-stock roms is just way worse, afaik it's driver related problem.
---------- Post added at 03:08 PM ---------- Previous post was at 03:04 PM ----------
For a while now i've been using stock-based. May be any one could share some photos (day- and night-time) taken on cm/pa/other custom rom for comparison.
Click to expand...
Click to collapse
Eh... This doesn't sound too good, guess I'll stay on stock for the time being. Thanks for all the replies.
Not on and English site yet, but here it is in Japanese.
http://consumer.huawei.com/jp/press/news/hw-478102.htm
translation
In this update, watch face-related enhancements and various bug fixes have been made.
The enhanced part, some face corresponds to the color display in the energy-saving mode
"Roman 3D" is added as a new watch face.
new ring tones "Bounce," "Dream it possible", "Spring"
bug fixes: Bluetooth disconnection fix, phone call interrupted fix, cycling is misidentified as climbing fix, tilt-to-wake improved, Google map rotation fix, unexpected restart fix.
Has anyone received it yet?
nothing yet here..... but im excited
Tried to force update. Restarted watch a couple of times. Says I'm up to date but still on 1.4. I'm in Canada if that makes a difference.
effing brilliant!!! So pleased, i just got one and have heard about the red screen tint and that 'upset' me so seeing a fix in the works is great.
C'mon . . . .C'mon - so impatient - checks for update again . . .
Nice find. Waiting for OTA
I got it earlier today. I did TWRP backup, but restored back to MEC23L to see if I could get it again and capture the OTA. Seemed a little faster, probably placebo.
jjc_01 said:
I got it earlier today. I did TWRP backup, but restored back to MEC23L to see if I could get it again and capture the OTA. Seemed a little faster, probably placebo.
Click to expand...
Click to collapse
Can u post pics of the new watch face?
Sent from my Nexus 6P using XDA Labs
I couldn't find it. There was just Roman, like normal. No "Roman 3d".
Has anyone had any luck? There's nothing in the UK at the moment, except euroscepticism
Can someone capture the OTA please?
Can someone post the OTA?
thanks for the info... waiting for the OTA
I just received the update! It's not a big improvement. A couple bugfixes like bluetooth! Just 3 new ringtones and a new designed Roman watchface. Pretty cool tough! Can't tell if the red circle is gone because I didn't had that problem. I got the update right after I restored my watch because I had a lot of bluetooth connection problems. http ://imgur. com /a/Qfd5p (please remove the empty spaces)
---------- Post added at 08:21 PM ---------- Previous post was at 08:18 PM ----------
[/COLOR]
dadoc04 said:
Can u post pics of the new watch face?
Sent from my Nexus 6P using XDA Labs
Click to expand...
Click to collapse
Just exactly the same as the Roman one. Except there is a 'shiny side' when you tilt your watch. And when you're watch goes into dim mode it's a little bit different. Look my post above.
---------- Post added at 08:25 PM ---------- Previous post was at 08:21 PM ----------
jjc_01 said:
I couldn't find it. There was just Roman, like normal. No "Roman 3d".
Click to expand...
Click to collapse
For the new Roman 3D watchface you have to look for it in settings and then 'change watchface.' Have fun
thca said:
http://imgur.com/a/Qfd5p
Click to expand...
Click to collapse
Thanks
for those who have gotten the update and use Google fit, can you keep an eye on your step count? when my 360 sport updated to 1.5 my steps dropped like 40% and others have reported the issue as well (though it seems like a minority.) I want to hold off updating my hwatch if this is the case.
jjc_01 said:
I got it earlier today. I did TWRP backup, but restored back to MEC23L to see if I could get it again and capture the OTA. Seemed a little faster, probably placebo.
Click to expand...
Click to collapse
So it came in with TWRP installed? I have that and a custom rooted kernel and nothing yet. I wonder if I need to restore to stock to get the OTA?
Would anyone please capture the link of OTA zip file? I'm on the stock FW but still don't receive 1.5. Can't wait for it!
Since those that have gotten it just like to post they they got it. Whats the process of catching it so I can share whenever i get it
Sent from my SM-G935V using XDA-Developers mobile app
Crsdr37 said:
Since those that have gotten it just like to post they they got it. Whats the process of catching it so I can share whenever i get it
Sent from my SM-G935V using XDA-Developers mobile app
Click to expand...
Click to collapse
http://www.droid-life.com/2014/06/05/download-nexus-ota-url-file/
I have my cradle connected and a cmd window open with "adb logcat" ready to fire!
.... and it will take 2 weeks to get to me......
I have used two apps Auto Speaker and SpeakerPhone on my previous phones basically uses proximity sensor to switch between earpiece and speaker which is super convenient for me. That said neither work on op5t and its stupid dialer. Any suggestions options?
Install Google phone
Sent from my ONEPLUS A5010 using Tapatalk
I want to but am not rooted.
thisguy159 said:
I want to but am not rooted.
Click to expand...
Click to collapse
No need to be rooted.
Just look in Apps, you just need to install.APK and give permissions.
Google dialer does not have this option. I love proximity speaker as well. Hopefully we start getting more roms, like purefusion that integrate this feature into the dialer
Sent from my ONEPLUS A5010 using Tapatalk
gotshoaib said:
No need to be rooted.
Just look in Apps, you just need to install.APK and give permissions.
Click to expand...
Click to collapse
I never know what to look for often there are multiple variations with multiple threads etc...like the google cam, no idea which one is new which one isn't is is gcam or google camera all in one etc, i have it installed now, one of the versions works nice other than the apps for automatic speakerphone still don't work.
If somebody could explain to me how to find the latest apps and all the apps available other than scour through hundreds of pages I would appreciate it.
thisguy159 said:
I never know what to look for often there are multiple variations with multiple threads etc...like the google cam, no idea which one is new which one isn't is is gcam or google camera all in one etc, i have it installed now, one of the versions works nice other than the apps for automatic speakerphone still don't work.
If somebody could explain to me how to find the latest apps and all the apps available other than scour through hundreds of pages I would appreciate it.
Click to expand...
Click to collapse
XDA and OnePlus community has something new everyday, so is just you have to read read read, download and try installing. Next day you will find updated version of App, update. If you don't like latest update, revert back to old version.
All about community is to try beta versions and help developers by feedback and having fun modifying your device with your choice.
---------- Post added at 04:23 AM ---------- Previous post was at 04:22 AM ----------
You will find many versions of same app, bxuz they all offer special kinda tweaks from different developers.
---------- Post added at 04:24 AM ---------- Previous post was at 04:23 AM ----------
https://forum.xda-developers.com/oneplus-5t/themes/google-dialer-contacts-apks-t3720607
Anybody receive the web client update for Android messaging app? Does anybody have a link to sideload the update? I'm impatient. Looks like a cool feature.
I received the update yesterday. Use Pushbullet.
Sent from my Pixel 2 XL using Tapatalk
Just got the update from play store. For somereason the web client option isn't showing in my drop down menu.
Playstore just updated mine...
azpatterson3 said:
Just got the update from play store. For somereason the web client option isn't showing in my drop down menu.
Click to expand...
Click to collapse
Me too, I got the update but in the menu I don't see "Messages for web"
---------- Post added at 05:34 PM ---------- Previous post was at 05:34 PM ----------
azpatterson3 said:
Just got the update from play store. For somereason the web client option isn't showing in my drop down menu.
Click to expand...
Click to collapse
Me too, I just got the update but I don't see "Messages for Web" in the menu.
KHANrad_SIN said:
Me too, I got the update but in the menu I don't see "Messages for web"
---------- Post added at 05:34 PM ---------- Previous post was at 05:34 PM ----------
Me too, I just got the update but I don't see "Messages for Web" in the menu.
Click to expand...
Click to collapse
I can't think of any reason it isn't showing. Hopefully someone knows.
azpatterson3 said:
I can't think of any reason it isn't showing. Hopefully someone knows.
Click to expand...
Click to collapse
Me either. I tried disabling the app and reinstalling but that didn't work. Are you rooted and/or have substratum installed?
KHANrad_SIN said:
Me either. I tried disabling the app and reinstalling but that didn't work. Are you rooted and/or have substratum installed?
Click to expand...
Click to collapse
I am rooted on Android P dp3. No substratum installed.
Same thing, just got the update and it says includes web client etc.. but still no option in the app. Rip
I'm on stock Android. Maybe everyone isn't getting the updated messages with the option for web messages. Be patient.
Sent from my Pixel 2 XL using Tapatalk
gadget069 said:
I'm on stock Android. Maybe everyone isn't getting the updated messages with the option for web messages. Be patient.
Click to expand...
Click to collapse
Definitely says it's included but it's not there. Might be a root thing or Android P issue. Thought it would be cool to have but not worth going back to stock. Oh well.
My messages versionView attachment 4532536
Sent from my Pixel 2 XL using Tapatalk
gadget069 said:
My messages version
Click to expand...
Click to collapse
Same version I have. This has me stumped.
I believe they have to enable it on the server side and then it'll appear. It seems to be gradual rollout as usual with Google.
pipnmike said:
I believe they have to enable it on the server side and then it'll appear. It seems to be gradual rollout as usual with Google.
Click to expand...
Click to collapse
Sounds right. I've got the same version and web messaging is working for me. Started working yesterday.
Got it on DP3.
Golf c said:
Got it on DP3.
Click to expand...
Click to collapse
hmm.. still haven't gotten it. Are your full stock kernel and no root? Or rooted? Just wondering
Ericarthurc said:
hmm.. still haven't gotten it. Are your full stock kernel and no root? Or rooted? Just wondering
Click to expand...
Click to collapse
Rooted, custom kernel. My other phone has it to stock 8.1.0 pixel xl
Been two days since I updated the messages app with web client. Still not showing in my options. Wonder if the rollout might be based on carrier. I'm on AT&T.
Found this posted on XDA. Seems like a long way to go to try it out. Apparently it only works for a limited time. Might give it a go if I still am not up and running by Monday
https://www.google.com/amp/s/www.xda-developers.com/try-android-messges-for-web-now/amp/
I could not believe it, but after consulting some sources I had to recognize that the update to Android 10 has been withdrawn for the third time
Download it here;
https://forum.xda-developers.com/mi-a3/development/fastboot-rom-stock-android-10-t4078893
as long as https://forum.xda-developers.com/mi-a3/how-to/discussion-android-10-t4059843
Seems a wise decision to me
Barbiox Dogg said:
Download it here;
https://forum.xda-developers.com/mi-a3/development/fastboot-rom-stock-android-10-t4078893
Click to expand...
Click to collapse
And why should I download and install an update that was withdrawn from the house because it encountered programming defects?
IlSaro said:
And why should I download and install an update that was withdrawn from the house because it encountered programming defects?
Click to expand...
Click to collapse
it has some super little bug . so don't complain that it was pulled out. just be thankful then.
---------- Post added at 05:09 PM ---------- Previous post was at 05:08 PM ----------
Barbiox Dogg said:
Download it here;
https://forum.xda-developers.com/mi-a3/development/fastboot-rom-stock-android-10-t4078893
Click to expand...
Click to collapse
thanks to this one. wise move backing it up.
donedos said:
it has some super little bug . so don't complain that it was pulled out. just be thankful then.
---------- Post added at 05:09 PM ---------- Previous post was at 05:08 PM ----------
Click to expand...
Click to collapse
Perhaps these are little bugs to you, but not for all.
This is a major fiasco.
IlSaro said:
And why should I download and install an update that was withdrawn from the house because it encountered programming defects?
Click to expand...
Click to collapse
I only rendered help to you due to the way you said the update was pulled so I thought you wanted to download/update to the April build but you shouldn't have responded to me in that way. It's rude. I thought this forum is about helping one another, I guess I was wrong. From now on, I guess I will keep to myself.
grebulon said:
Perhaps these are little bugs to you, but not for all.
This is a major fiasco.
Click to expand...
Click to collapse
what are these bugs? just wondering..
I had annoying bugs with Android 10. Chrome kept flickering, full screen gestures not working with 3rd party launchers, slow fp reader, the mobile data kept disconnecting (had to turn on airplane mode on and off to have internet). Now I'm back on miui 11, everything is working fine.
donedos said:
what are these bugs? just wondering..
Click to expand...
Click to collapse
1 - big launcher icons
2 - if you turned apps suggestions off in the launcher, they'll be back after restarting
3 - can't dismiss/swipe away settings suggestions
4 - fingerprint only works if you have aod or wake for notifications turned on
5 - camera
These are the ones i've noticed...
Wow. The launcher icon bug still exists?
What exactly have they fixed in these last 2 rollouts?
Catlish said:
Wow. The launcher icon bug still exists?
What exactly have they fixed in these last 2 rollouts?
Click to expand...
Click to collapse
Yeah it's really disappointing. While it's not as horrendous as the first version, it should've been a smooth experience by now.
Strangely update is stable for me i haven't faced any issues with this device since I bought it
For the size of icons, you may try changing developer option\ smallest width from stocked 360 to 390 or 395. This can shrink them somewhat.
CLS_phone said:
For the size of icons, you may try changing developer option\ smallest width from stocked 360 to 390 or 395. This can shrink them somewhat.
Click to expand...
Click to collapse
That's right. I set mine to 411, which is the default dpi of google's pixel phones and many other flagships, and i'm loving it.
Simran62 said:
Strangely update is stable for me i haven't faced any issues with this device since I bought it
Click to expand...
Click to collapse
Same. Only issue I have like others is no EIS
Baron60 said:
Same. Only issue I have like others is no EIS
Click to expand...
Click to collapse
Electronic Image Stabilization?
This device has never had EIS.
I got this phone for my mother last year. This update has been so abysmal (I regret updating it after not updating it for the last two times), at times the phone even crashes while calling. Hangs at random times. Didn't really expect it from a Android One phone
AnubhavKumarc said:
I got this phone for my mother last year...
A full recovery after a version upgrade is recommended, if you haven't already done so.
Click to expand...
Click to collapse
bttcp12 said:
Electronic Image Stabilization?
This device has never had EIS.
Click to expand...
Click to collapse
? It has a very good EIS for videos in stock camera app in Android 9. Doesn't work in Gcam though.