Google's initial Android Stagefright patch inadequate, forced to issue second fix

2»

Comments

  • Reply 21 of 39
    jbdragonjbdragon Posts: 2,313member
    jameskatt2 wrote: »

    Apple has been reducing user's need for Google's services on its devices.  For example, when doing search using Siri, you are using Bing search, not Google.  Apple Maps has also replaced Google Maps.

    So yes,  Apple has significantly reduced Google's revenue from iOS devices.

    And now, Apple has added the ability to AD-BLOCK on Safari in iOS.  This means iOS users will have the opportunity to block ads from Google.  

    You bet users will use Ad Blockers on iOS.  After all, ads use up your Data Allocation. You are paying for ads simply by viewing them on your iPhone or iPad.  Ads also slow down web pages.  So yes, users will use Ad Blockers.  This will destroy whatever is left of Google's Revenue from iOS devices - which is most of their mobile revenue.

    Google still pays Apple to be the default search engine in safari!.
     0Likes 0Dislikes 0Informatives
  • Reply 22 of 39
    calicali Posts: 3,494member
    Complete and utter bullshit. Google acquired Android in August 2005. Apple already had basic prototypes of the iPhone in 2005, which means they would have had to been working on it for some time already.

    There's sources that say iPhone prototypes existed in 2004 under the m28 name(or other similar name).

    If you really wanna go back, the touchscreen mobile device was being worked on years earlier with the iPad.

    We can go even further into the 80's when Apple produced videos showcasing the mobile touchscreen concept with a siri-like assistant. Which is creepy considering the date in the video was the same month and year Siri was launched. They basically predicted the future decades before.

    People have this idea that one of the world's biggest phenomenons was created overnight. No Way.
    I'd call the iPhone a bigger phenomenon that cars and the internet.
    gatorguy wrote: »
    When you start your claims that someone else is tossing around BS you might consider checking first. Research isn't all that time-consuming and sure does help prevent embarrassment when emphatically claiming something as fact turns out not to be true.

    Google invested in Android back in 2004. purchasing it outright sometime early in 2005. The first mention in the press didn't hit until Aug/05. It's like the Placebase purchase that Apple kept hidden from the press until October/09 even tho it took place months earlier in July if not before. You remember this don't you?
    http://www.phonearena.com/news/Did-you-know-Samsung-could-buy-Android-first-but-laughed-it-out-of-

    You might also read up on your iPhone history too. Project engineers weren't even hired until late in 2005, and prototypes didn't appear until 2006 according to evidence they submitted in the Samsung trial. You probably got confused with the Purple Project that was intended to result in the iPad. Yes that did start earlier.

    SO WHAT??

    The original droid was a freaking Blackberry knockoff.

    700


    700
     0Likes 0Dislikes 0Informatives
  • Reply 23 of 39
    gatorguygatorguy Posts: 24,736member
    cali wrote: »
    There's sources that say iPhone prototypes existed in 2004 under the m28 name(or other similar name).
    Those 2004 prototypes were of the iPad, not the iPhone. Again that's according to court documents Apple had to submit in the Samsung case. I imagine Apple was being honest about it.

    EDIT: speeling
     0Likes 0Dislikes 0Informatives
  • Reply 24 of 39
    cali wrote: »
    Let's see how the fanDroids spin this one. This is really gonna push their creativity.
    The irony here is, if Giggle wouldn't have betrayed Apple they would have been making a ton more money with no work.

    I hope Apple cuts iOS revenue stream for them soon.

    Goog would still make ad revenue off iOS users who use YouTube app, and have their search engine set to google. What could really hurt Google is if someone develops a better search engine than Google, but so far, I haven't found a challenger.
     0Likes 0Dislikes 0Informatives
  • Reply 25 of 39
    gatorguygatorguy Posts: 24,736member
    jbdragon wrote: »
    Google only asks for 18 months of support. That's not a mandate and that's only a year and a half. So if you're under a 2 year contract and buy in day on, you still lose what support you may have for 6 months minimum. If you don't buy that Android phone until 6 months later, well you hire only have support for 1 year. Our you buy a nexus and limit yourself to Only a couple phones. These goes all that so called choice!!!
    Google actually promises OS support for their own devices for the longer of three years from first sale or 18 months from last.
     0Likes 0Dislikes 0Informatives
  • Reply 26 of 39
    bigmac2bigmac2 Posts: 639member
    Quote:

    Originally Posted by sog35 View Post

     

     

    So why didn't Apple do anything about the fake fingerprint 'hack'?




    I wonder what HTC is doing right now about their open and unencrypted fingerprint authentification. 

     

    http://www.theguardian.com/technology/2015/aug/10/htc-fingerprints-world-readable-unencrypted-folder

     0Likes 0Dislikes 0Informatives
  • Reply 27 of 39
    gatorguygatorguy Posts: 24,736member
    bigmac2 wrote: »

    I wonder what HTC is doing right now about their open and unencrypted fingerprint authentification. 

    http://www.theguardian.com/technology/2015/aug/10/htc-fingerprints-world-readable-unencrypted-folder
    I would have assumed you read the link before posting it, but perhaps not since your answer is right there 7 paragraphs down :\

    "An HTC spokesperson said on Tuesday: “HTC is aware of the FireEye report on fingerprint scanner security. We have already addressed the issue for the HTC One max in all regions, and it doesn’t affect any other HTC devices. "
     0Likes 0Dislikes 0Informatives
  • Reply 28 of 39
    (Preempt: I've owned both Android and Apple phones from release to now.)

    I can say that if there's ANYTHING that is vying for the most pathetic thing on the internet, it's the echo-chamber fanboys who think that their ego-bukakke attempts to trash alternative phones/browsers/OSes/etc, is in ANY way evidence of their own preference's superiority.

    Seriously, it's pathetic.
     0Likes 0Dislikes 0Informatives
  • Reply 29 of 39
    brucemcbrucemc Posts: 1,541member
    Quote:

    Originally Posted by auxio View Post

    Let's compare the two.  Exploiting TouchID requires:

     

    1) Having physical access to someone's phone/tablet

    2) Having a very high quality copy of that person's fingerprint

    3) Having the technical skill to scan and enhance that fingerprint and reprint it at very high quality

    4) The person having not realized their phone/tablet is missing during this process and remotely disabled it

     

    Exploiting Stagefright requires:

     

    1) Creating a special video file (I'm sure there are already tools out there for this)

    2) Having someone's phone number

     

    I'll leave it to you to figure out which one is more likely to be exploited.


    Yeah, I can't believe that @jsmythe00 was trying to imply the Stagefright exploit is not as big a deal as the fingerprint hack.  All it takes is 10 minutes of research to see that this isn't a media created controversy (who tend to not highlight Android issues in general anyways), but an issue raised by & repeated by security firms.  The potential for damage is huge.  The issue was only publicly known 3 weeks ago, so to say that it isn't a real issue because no known exploits have happened is crazy.  Especially when it is also the case that for some devices/messaging apps, the exploit can happen without any user notification (MMS received, exploit happens, message deleted).

     

    The main issue it has highlighted is the complexity and time delays in getting security patches out to (non-Google) Android devices (which Apple fans have known about and warned about for some time).  A positive note I guess is that the large firms, like Samsung, Lenovo, HTC and Sony are finally getting serious about it, so in the future it may not be as bad for those handsets.  However, I don't think we will ever see the 1000's of other Android handset vendors - who make super slim margins - do much.

     0Likes 0Dislikes 0Informatives
  • Reply 30 of 39
    bigmac2 wrote: »

    I wonder what HTC is doing right now about their open and unencrypted fingerprint authentification. 

    http://www.theguardian.com/technology/2015/aug/10/htc-fingerprints-world-readable-unencrypted-folder

    Probably letting the five customers that Gary Oldman conned into buying an HTC know by email to upgrade to some thing more secure. /s
     0Likes 0Dislikes 0Informatives
  • Reply 31 of 39
    foggyhillfoggyhill Posts: 4,767member
    Quote:

    Originally Posted by jsmythe00 View Post



    Proof of concept? So how likely is this exploit bound to make it into the wild. Apple has had proof of concept security holes(fake a finger print to bypass touchid) but that didn't garner this much news.



    If it's a real issue then flame android, BUT, if it's a extremely unlikely to happen condition, then let them fix it and move along

     

    Huh! This is a very easy bug to "prove", not something esoteric. I'm sure you could have found that out all by yourself... But, noooooo, you didn't. A full block is hard to do because you could be social engineered to side load; most hacks are done through social engineering and malware, not direct attacks on the device.

     0Likes 0Dislikes 0Informatives
  • Reply 32 of 39
    foggyhillfoggyhill Posts: 4,767member
    Quote:

    Originally Posted by auxio View Post

     

     

    Let's compare the two.  Exploiting TouchID requires:

     

    1) Having physical access to someone's phone/tablet

    2) Having a very high quality copy of that person's fingerprint

    3) Having the technical skill to scan and enhance that fingerprint and reprint it at very high quality

    4) The person having not realized their phone/tablet is missing during this process and remotely disabled it

     

    Exploiting Stagefright requires:

     

    1) Creating a special video file (I'm sure there are already tools out there for this)

    2) Having someone's phone number

     

    I'll leave it to you to figure out which one is more likely to be exploited.


     

    You forgot one more thing. Those wicked Apple TouchID hacker also have to make sure the finger is the right one. If you use some unorthodox finger for touch ID, say the smallest one, they'd be locked out even with all of that. I'd think that if someone wants your stuff enough for this to matter, they've probably bugged your stuff silly and placed tiny cameras/microphones everywhere (plus GPS on your care ;-).

     0Likes 0Dislikes 0Informatives
  • Reply 33 of 39
    Quote:

    Originally Posted by Gatorguy View Post

     
    Quote:

    Originally Posted by sog35 View Post



    But if Google did not backstab Apple in the first place with Android


    Google was involved with developing Android as a mobile OS for smartphones well before Apple ever began the iPhone project. It would have been impossible for Mr. Jobs not to have know that, particularly by the time he invited Mr. Schmidt to serve Apple on their BOD. IMHO that was a "keep your enemies closer" plan, with Mr Jobs hoping he could influence (pressure) Google into handicapping Android just to stay on Apple's good side.



    Apple was "betting the house" on the iPhone and smartly covering all the bases they could, influencing where they could influence to give the iPhone every chance they could to succeed.

    Kind of off topic from the point you are making here, but remember when Jobs stood on stage and announced the original iPhone and everybody's jaws hit the floor? The folks at Google went back to the drawing board.

     

    Also lets not forget Palm... oh poor Palm. They had a few great UI elements that seemingly everyone else borrowed.

     0Likes 0Dislikes 0Informatives
  • Reply 34 of 39
    sog35 wrote: »
    jsmythe00 wrote: »
    Well...what if they shit down android and apple shut them out of iOS. They have no control over what goes on in iOS. In fact, Apple has been systematic killing Google from iOS. Maps, search via Siri...


    At least with android they have a profit generating fallback.

    But if Google did not backstab Apple in the first place with Android, Apple would never had made their own Maps and search.

    Apple was happy with allowing Google search on iOS.  But you backstab Apple then you get nuked.

    IMO, Android will be the worse decision Google will ever make.  Because it would have cut off the Apple cash cow from their search.

    sog35 wrote: »
    gatorguy wrote: »
    Apple began their own map plans long ago, buying Placebase way back in July 2009, while Apple was still using Mr Schmidts services on their Board of Directors. IMHO Google was on the way out anyway as soon as Apple was able to put their own services in place whether they were "Apple's friend" or not. That's what Apple does when it adds value to their ecosystem, and kudos to them for good business practices.

    Maps is minor.

    Google is about search.  Apple was content with Google search on iOS until they backstabbed them with Android.

    iOS is Google's cash cow on mobile.  And soon it will be cut off because of their greed.

    In 5 years people will remember Android as the biggest mistake Google ever made.  When all is said and done they would have lost a ton of money on Android with the Motorolla fisaco and low revenue from Android users.  But most of all Android was the knife they used to stab Apple in the back.  This will be remember like the move Nintendo did to stab Sony in the back with the original playstation.  Sony got its revenge by bringing out the PS1 and Nintendo has never been the dominant figure in gaming ever since.

    In five years I see Google down to selling thermostats on street corners or huddled around burning trash cans... yeah, that's what I see...
     0Likes 0Dislikes 0Informatives
  • Reply 35 of 39
    sog35 wrote: »
    Did Apple do anything to try to address the fake fingerprint scam.  Nope.  

    And you know this how?? Apple doesn't necessarily need to send out a press release and let the hackers beat their heads against a locked door...
     0Likes 0Dislikes 0Informatives
  • Reply 36 of 39
    steven n.steven n. Posts: 1,229member
    gatorguy wrote: »
    Google was involved with developing Android as a mobile OS for smartphones well before Apple ever began the iPhone project. It would have been impossible for Mr. Jobs not to have know that, particularly by the time he invited Mr. Schmidt to serve Apple on their BOD. IMHO that was a "keep your enemies closer" plan, with Mr Jobs hoping he could influence (pressure) Google into handicapping Android just to stay on Apple's good side.

    Apple was "betting the house" on the iPhone and smartly covering all the bases they could, influencing where they could influence to give the iPhone every chance they could to succeed.

    Your first sentence is an outright lie.
     0Likes 0Dislikes 0Informatives
  • Reply 37 of 39
    steven n.steven n. Posts: 1,229member
    gatorguy wrote: »
    Google actually promises OS support for their own devices for the longer of three years from first sale or 18 months from last.
    gatorguy wrote: »
    Google was involved with developing Android as a mobile OS for smartphones well before Apple ever began the iPhone project. It would have been impossible for Mr. Jobs not to have know that, particularly by the time he invited Mr. Schmidt to serve Apple on their BOD. IMHO that was a "keep your enemies closer" plan, with Mr Jobs hoping he could influence (pressure) Google into handicapping Android just to stay on Apple's good side.

    Apple was "betting the house" on the iPhone and smartly covering all the bases they could, influencing where they could influence to give the iPhone every chance they could to succeed.

    Your first sentence is an outright lie. I know engineers at Apple assigned to iPhone in late 2004. Google got involved with android in late 2005.

    Likewise, Google has done a poor job of supporting their Nexus profits for 18 months. Even from first release.
     0Likes 0Dislikes 0Informatives
  • Reply 38 of 39
    gatorguygatorguy Posts: 24,736member
    steven n. wrote: »

    Your first sentence is an outright lie. I know engineers at Apple assigned to iPhone in late 2004. Google got involved with android in late 2005.

    Likewise, Google has done a poor job of supporting their Nexus profits for 18 months. Even from first release.
    So Apple lied in court when they were subpoenaed to provide the timeline and supporting photos of iPhone model development? Not very likely. Their documents show late 2005 as the beginning of the project with the first mockups in 2006. I think you've confused tablet development, which did start in 2004 IIRC, with the iPhone project.
     0Likes 0Dislikes 0Informatives
Sign In or Register to comment.