Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#1

Post by mike-cardwell » Mon, Sep 15, 2014, 8:11 PM UTC

Major Android Bug Is a Privacy Disaster (CVE-2014-6041)
community.rapid7.com

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#2

Post by talos » Mon, Sep 15, 2014, 9:08 PM UTC

This is nuts. On a sidenote, any suggestions for an equivalently fast, secure browser for Android 4.2 on a relatively old phone? Not gonna use AOSP anymore!

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#3

Post by voidlogic » Mon, Sep 15, 2014, 9:13 PM UTC

talos wrote: post #2

This is nuts. On a sidenote, any suggestions for an equivalently fast, secure browser for Android 4.2 on a relatively old phone? Not gonna use AOSP anymore!

Firefox mobile works great, give that a look.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#4

Post by aroch » Mon, Sep 15, 2014, 9:14 PM UTC

talos wrote: post #2

This is nuts. On a sidenote, any suggestions for an equivalently fast, secure browser for Android 4.2 on a relatively old phone? Not gonna use AOSP anymore!

I use Firefox on my Android phones, it's come a long way since its first release and is pleasantly stable and comparably quick to chrome.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#5

Post by takeda » Mon, Sep 15, 2014, 9:14 PM UTC

talos wrote: post #2

This is nuts. On a sidenote, any suggestions for an equivalently fast, secure browser for Android 4.2 on a relatively old phone? Not gonna use AOSP anymore!

You can try Opera Mobile Classic, it's important to use classic version since the new Opera Mobile uses the same engine as chrome so it might have the same vulnerabilities.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#6

Post by iancarroll » Mon, Sep 15, 2014, 9:17 PM UTC

takeda wrote: post #5

talos wrote: post #2

This is nuts. On a sidenote, any suggestions for an equivalently fast, secure browser for Android 4.2 on a relatively old phone? Not gonna use AOSP anymore!

You can try Opera Mobile Classic, it's important to use classic version since the new Opera Mobile uses the same engine as chrome so it might have the same vulnerabilities.

AOSP != Chrome, right? ...

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#7

Post by [deleted] » Mon, Sep 15, 2014, 9:17 PM UTC

talos wrote: post #2

This is nuts. On a sidenote, any suggestions for an equivalently fast, secure browser for Android 4.2 on a relatively old phone? Not gonna use AOSP anymore!

[deleted]

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#8

Post by nokcha » Mon, Sep 15, 2014, 9:19 PM UTC

iancarroll wrote: post #6

takeda wrote: post #5

Earlier quoted context omitted.

You can try Opera Mobile Classic, it's important to use classic version since the new Opera Mobile uses the same engine as chrome so it might have the same vulnerabilities.

AOSP != Chrome, right? ...

Right, the AOSP browser is not Chrome. The AOSP browser is deprecated and is not installed by default on recent versions of Android.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#9

Post by bhaile » Mon, Sep 15, 2014, 9:22 PM UTC

talos wrote: post #2

This is nuts. On a sidenote, any suggestions for an equivalently fast, secure browser for Android 4.2 on a relatively old phone? Not gonna use AOSP anymore!

Chrome/Firefox. Not AOSP stock browser.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#10

Post by allegory » Mon, Sep 15, 2014, 9:22 PM UTC

It's this sort of thing that puts me off Android as a platform. Even my mother got sold a 2.2 handset recently (Samsung Galaxy Ace) that hasn't been patched for the best part of 3 years. You never know when you're going to end up with a lemon on your hands.

Big jump to this conclusion but I'm more inclined to trust Microsoft at the moment as they have a better reputation for lifetime (unlike Android), have a very public security process and good industry comms and the devices are proven usable if not faster after recent updates (unlike iOS which starts to be terribly limiting performance-wise). Plus they're dirt cheap.