5 ms·

Seems to be fixed in Android July security update. Not sure wrt iPhone, iPad.

tempay 9y ago
It was fixed in ios 10.3.1 (3rd April) https://support.apple.com/en-us/HT207688 https://support.apple.com/en-us/HT207688
- 0x0 9y ago
  Is that the same bug, or a different one, though?
  - CodeWriter23 9y ago
    It's a different bug. 10.3.1 patches this bug, which isn't Broadpwn https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html https://googleprojectzero.blogspot.com/2017/04/over-air-expl... The Broadpwn discoveries were informed by the techniques used by PZ to discover the original exploit.
IshKebab 9y ago
I hope someone will write a very visible worm that spreads via unpatched Android phones (approximately all of them) and finally forces Google to take updates seriously. Can anyone see a reason this wouldn't work?
- johncolanduoni 9y ago
  The fact tha Google is pretty timely with updates, and if this happened the manufacturers would be content with letting the malware push people towards earlier upgrades?
- cptskippy 9y ago
  What do you hope such an attack would achieve? Giving Apple more market share? Apple controls the iPhone soup to nuts and can update them as they see fit. They are the OEM and they do not allow Carriers to modify their devices. Google provides an OS for free and stipulates that OEMs must make some concessions to get the GAPPs everyone wants for that OS. It has no where near the control over handsets or the ability to update them without cooperation from OEMs and Carriers who contracted with those OEMs. With each new version of Android, Google is asking for more and more control over the system however they'll never own the devices or be able to exert their will the way Apple can. Attacking field devices won't spur Google to ship magic updates to everyone's unsupported handsets because they couldn't even if they wanted to. It might spur them to make additional changes in future OS versions but the vast majority of handsets in the field would never receive those updates.
  - IshKebab 9y ago
    I'd hope that it pushes Google to rearchitect Android so that updates can actually be installed by the vast majority of people. Before saying "but that's impossible, it's down to the OEMs!" consider: 1. Windows runs on many many PCs and it is trivial to keep updated, so it is possible without OEM cooperation. 2. Google actually have finally started this work, which proves that they can solve, or at least improve the situation. But the fact that they didn't start working on it until now shows how low a priority it is for them. That is what needs to change, and I would hope an automatic Wi-Fi worm would do it.
    - bitmapbrother 9y ago
      You realize that Google doesn't distribute OS binaries to OEM's, correct? So why are you using Windows as an example? Each OEM downloads the Android OS source, adds their modifications and builds their own OS. How is Google supposed to modify or update an OS not built by them?
- bitmapbrother 9y ago
  Fortunately, your dream will never come true. Remember Stagefright? Whatever happened to that? Oh, that's right nothing ever happened. There hasn't been one reported case of Stagefright in the wild according to Google's telemetry of over 2 Billion Android devices that use GMS. Finding an exploit is one thing, making it work and bypassing all of the OS mitigations, on a platform that essentially has OEM's build their own OS, is an entirely different matter. It's why Stagefright never got anywhere and it's also why this will go the same way Stagefright did.

It was fixed in ios 10.3.1 (3rd April) https://support.apple.com/en-us/HT207688 https://support.apple.com/en-us/HT207688

0x0 9y ago
Is that the same bug, or a different one, though?
- CodeWriter23 9y ago
  It's a different bug. 10.3.1 patches this bug, which isn't Broadpwn https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html https://googleprojectzero.blogspot.com/2017/04/over-air-expl... The Broadpwn discoveries were informed by the techniques used by PZ to discover the original exploit.

IshKebab 9y ago

I hope someone will write a very visible worm that spreads via unpatched Android phones (approximately all of them) and finally forces Google to take updates seriously. Can anyone see a reason this wouldn't work?

johncolanduoni 9y ago
The fact tha Google is pretty timely with updates, and if this happened the manufacturers would be content with letting the malware push people towards earlier upgrades?
cptskippy 9y ago
What do you hope such an attack would achieve? Giving Apple more market share? Apple controls the iPhone soup to nuts and can update them as they see fit. They are the OEM and they do not allow Carriers to modify their devices. Google provides an OS for free and stipulates that OEMs must make some concessions to get the GAPPs everyone wants for that OS. It has no where near the control over handsets or the ability to update them without cooperation from OEMs and Carriers who contracted with those OEMs. With each new version of Android, Google is asking for more and more control over the system however they'll never own the devices or be able to exert their will the way Apple can. Attacking field devices won't spur Google to ship magic updates to everyone's unsupported handsets because they couldn't even if they wanted to. It might spur them to make additional changes in future OS versions but the vast majority of handsets in the field would never receive those updates.
- IshKebab 9y ago
  I'd hope that it pushes Google to rearchitect Android so that updates can actually be installed by the vast majority of people. Before saying "but that's impossible, it's down to the OEMs!" consider: 1. Windows runs on many many PCs and it is trivial to keep updated, so it is possible without OEM cooperation. 2. Google actually have finally started this work, which proves that they can solve, or at least improve the situation. But the fact that they didn't start working on it until now shows how low a priority it is for them. That is what needs to change, and I would hope an automatic Wi-Fi worm would do it.
  - bitmapbrother 9y ago
    You realize that Google doesn't distribute OS binaries to OEM's, correct? So why are you using Windows as an example? Each OEM downloads the Android OS source, adds their modifications and builds their own OS. How is Google supposed to modify or update an OS not built by them?
bitmapbrother 9y ago
Fortunately, your dream will never come true. Remember Stagefright? Whatever happened to that? Oh, that's right nothing ever happened. There hasn't been one reported case of Stagefright in the wild according to Google's telemetry of over 2 Billion Android devices that use GMS. Finding an exploit is one thing, making it work and bypassing all of the OS mitigations, on a platform that essentially has OEM's build their own OS, is an entirely different matter. It's why Stagefright never got anywhere and it's also why this will go the same way Stagefright did.