Active Topics
-
The N900 is now 15 years old! (6)
to Nokia N900 by Macros - 1 day, 1 hr ago -
F(x)tec Pro1x (QWERTY) for sale (0)
to Buy & Sell by aln00000 - 1 day, 14 hrs ago -
n770 youtube video (0)
to General by nmdv - 5 days, 13 hrs ago - more...
| The Following 13 Users Say Thank You to Win7Mac For This Useful Post: | ||
 |
|
2016-08-08
, 14:08
|
|
Moderator |
Posts: 3,718 |
Thanked: 7,419 times |
Joined on Dec 2009
@ Bize Her Yer Trabzon
|
#2
|
Now if we only had Android root for Jolla C and Intex Aqua Fish.
Did someone installed the QuadRoot scanner on Jolla phones yet?
Did someone installed the QuadRoot scanner on Jolla phones yet?
 |
|
2016-08-08
, 14:31
|
|
Posts: 6,436 |
Thanked: 12,701 times |
Joined on Nov 2011
@ Ängelholm, Sweden
|
#4
|
wtf, where are exploits? i want to root my phone 
 |
|
2016-08-08
, 14:59
|
|
Posts: 7,075 |
Thanked: 9,073 times |
Joined on Oct 2009
@ Moon! It's not the East or the West side... it's the Dark Side
|
#5
|
What's is most secure: jPhones, iPhones or a random androids.
__________________
Do something for the climate today! Anything!
I don't trust poeple without a Nokia n900...
Do something for the climate today! Anything!
I don't trust poeple without a Nokia n900...
|
|
2016-08-08
, 15:12
|
|
Moderator |
Posts: 5,320 |
Thanked: 4,464 times |
Joined on Oct 2009
|
#6
|
Had some complaints....
Keep it on-topic Dan, be respectful of the intent/focus of peoples threads.
Consider this your first & last non-infraction warning...
Not following this thread & most others, so rely on PMs or Post Reports of folks that play up.
Thank-you.
Keep it on-topic Dan, be respectful of the intent/focus of peoples threads.
Consider this your first & last non-infraction warning...
Not following this thread & most others, so rely on PMs or Post Reports of folks that play up.
Thank-you.
|
|
2016-08-08
, 19:05
|
|
Posts: 7,075 |
Thanked: 9,073 times |
Joined on Oct 2009
@ Moon! It's not the East or the West side... it's the Dark Side
|
#7
|
Instead of complaints. Can you bring anything good. When can we exclect Jolla to work this issue out with 3rd parties?
Or any link to patch.
https://www.checkpoint.com/downloads...rch-report.pdf
Last edited by Dave999; 2016-08-08 at 20:41.
Or any link to patch.
https://www.checkpoint.com/downloads...rch-report.pdf
__________________
Do something for the climate today! Anything!
I don't trust poeple without a Nokia n900...
Do something for the climate today! Anything!
I don't trust poeple without a Nokia n900...
Last edited by Dave999; 2016-08-08 at 20:41.
 |
|
2016-08-09
, 06:17
|
|
Posts: 6,447 |
Thanked: 20,981 times |
Joined on Sep 2012
@ UK
|
#8
|
Dave, "exclect"?
Pardon the silly question, but what's all the fuss anyway? If I understand it correctly, all that QuadRooter can do is obtain a root access. Sure, it means it can alter or remove some of the preinstalled bloatware that you cannot remove by standard means but isn't it about it? All the sensitive stuff (your address book, photos, videos, other personal data, network access (that could cost you money if used maliciously)) is in the userland and you grant apps access to those willingly. At least on Android. On Sailfish, there is no such protection at all to start with.
Pardon the silly question, but what's all the fuss anyway? If I understand it correctly, all that QuadRooter can do is obtain a root access. Sure, it means it can alter or remove some of the preinstalled bloatware that you cannot remove by standard means but isn't it about it? All the sensitive stuff (your address book, photos, videos, other personal data, network access (that could cost you money if used maliciously)) is in the userland and you grant apps access to those willingly. At least on Android. On Sailfish, there is no such protection at all to start with.
__________________
Русский военный корабль, иди нахуй!
Русский военный корабль, иди нахуй!
| The Following 7 Users Say Thank You to pichlo For This Useful Post: | ||
|
|
2016-08-09
, 06:48
|
|
Posts: 85 |
Thanked: 121 times |
Joined on Feb 2014
|
#9
|
QuadRooter it's about Qualcomm drivers (blobs) that are used by SailfishOS and Android at the same time.
My understanding is that a malicious user may gain root access at your SailfishOS as well. Or I'm wrong ?
My understanding is that a malicious user may gain root access at your SailfishOS as well. Or I'm wrong ?
| The Following 5 Users Say Thank You to tvicol For This Useful Post: | ||
|
|
2016-08-09
, 07:23
|
|
Community Council |
Posts: 4,920 |
Thanked: 12,867 times |
Joined on May 2012
@ Southerrn Finland
|
#10
|
The vulnerabilities seem pretty clear from the Checkpoint report, however this is also partly scareware; their business just is more or less bullying people into buying their intrusion deterring solution.
On a more-or-less standard Android device this attack might be rolled into a generic package that can take control of the device and either used to leak data or use it as a part of a botnet. However, if a poisoned application is run in Alien Dalvik on a SFOS device I believe it might have a hard time operating correctly since the Android layer is not similar to what is used in native Android devices.
It would probably (but I cannot be 100% sure of course) need to have a specially tailored version to be effective against SFOS devices. However, if such tailored attack is created, then it could also affect the native part of the system and not only the AD part of the system.
TLDR; probably you are safe in any case. If you do not install Alien Dalvik at all, you certainly are safe.
On a more-or-less standard Android device this attack might be rolled into a generic package that can take control of the device and either used to leak data or use it as a part of a botnet. However, if a poisoned application is run in Alien Dalvik on a SFOS device I believe it might have a hard time operating correctly since the Android layer is not similar to what is used in native Android devices.
It would probably (but I cannot be 100% sure of course) need to have a specially tailored version to be effective against SFOS devices. However, if such tailored attack is created, then it could also affect the native part of the system and not only the AD part of the system.
TLDR; probably you are safe in any case. If you do not install Alien Dalvik at all, you certainly are safe.
| The Following 4 Users Say Thank You to juiceme For This Useful Post: | ||
Nokia 5110 > 3310 > 6230 > N70 > N9 BLACK 64GB
Hildon Foundation Board member
Maemo Community e.V. co-creator, founder and director since Q4/2016
Current Maemo Community Council member