This is in a certain sense a typical checkpoint finding. It's probably a good finding and it's good that they point out the problematic andorid ecosystem. But t

This is in a certain sense a typical checkpoint finding. It's probably a good finding and it's good that they point out the problematic andorid ecosystem. But their announcement is then filled with some nonsense and marketing bullshit that's more likely to confuse users than help. In their blog post they say [1]: * "Use known, trusted Wi-Fi networks or while traveling use only those that you can verify are provided by a trustworthy source." What's that supposed to mean? Is a Wifi trustworthy if it's named Starbucks, because I just bought a coffee there? * "End users and enterprises should consider using mobile security solutions designed to detect suspicious behavior on a device, including malware that could be obfuscated within installed apps." I call bullshit. * And then further on [2]: "ZoneAlarm® Mobile Security for Android™ keeps your mobile devices fully protected from malicious apps and Wi-Fi attacks." Oh really? Can they explain how they overcame the theoretical limits (halting problem) that prevent something like this from being possible? A lot of it reminds me to the Misfortune Cookie vuln a while ago. Also a good find from Check Point in DSL routers, yet they claimed Zone Alarm can protect you, which was outright nonsense. [1] http://blog.checkpoint.com/2016/08/07/quadrooter/ http://blog.checkpoint.com/2016/08/07/quadrooter/ [2] https://www.checkpoint.com/resources/quadrooter-vulnerability-consumer/ https://www.checkpoint.com/resources/quadrooter-vulnerabilit...