3 ms·
> After that, Stagefright essentially gives the attacker control over the victim's Android device. Taking into account that this is not true because it still h
by Oletros 11y ago
> After that, Stagefright essentially gives the attacker control over the victim's Android device.
Taking into account that this is not true because it still have to bypass ASLR
> It also highlights the biggest problem with Android: Fragmentation.
2015 and still with this?
- StavrosK 11y agoWhat's funny is that it can go exactly the other way with iOS: "Apple's latest vulnerability also highlights the biggest problem with iOS: It's a monoculture."
- fnordsensei 11y agoDifference is a strength if it is different enough. That is, if devices are so different that building an exploit for one means it will not work on another. The problem they're trying to highlight here is that Androids may be similar enough for exploits to be widely applicable, while the absence of a centralized update channel that they control makes it hard to distribute fixes quickly. This arguably means that, in terms of security, they might be dealing with the drawbacks inherent in BOTH a monoculture and a diversified culture.
- AnimalMuppet 11y ago"All things have the advantages of their disadvantages, and vice versa." - Larry Wall