3 ms·
Is there a reason why quarantining image attachments from unknown senders hasn’t been standard industry practice ever since Stagefright?
by mortenjorck 5y ago
Is there a reason why quarantining image attachments from unknown senders hasn’t been standard industry practice ever since Stagefright?
- zionic 5y agoProject managers like the pretty inline previews! Security? Pssh that's just for nerds.
- flixic 5y agoApple specifically introduced BlastDoor framework to combat this, so NSO shifted their attacks around decoding, avoiding BlastDoor.
- arsome 5y agoAndroid 10 also introduced similar mitigations: https://android-developers.googleblog.com/2019/05/queue-hardening-enhancements.html https://android-developers.googleblog.com/2019/05/queue-hard... Though it's worth noting that the cost of Stagefright was surprisingly low - it took a long time for a good ASLR bypass to come out for it and by that time most devices were updated or replaced. Additionally, the sheer variance between Android devices means developing worm-level exploits becomes extremely difficult compared to something where everyone's running the exact same binary like Windows, so it likely only saw targeted use.