Users worried by the attack can change their lockscreen preferences to a pattern unlock or Pin code, which can be up to 16 characters long, instead of a password.Īfter the Stagefright security vulnerability, Google, Samsung, LG and other Android smartphone manufacturers recently pledged to release monthly security updates for their latest devices, in an attempt to help prevent this kind of attack being used. The attack requires physical access to the smartphone, and cannot be performed remotely. These devices will require a software update to fix the bug, but users will have to rely on the manufacturer of the smartphone and their mobile phone operator to roll out the update, rather than Google directly. The Guardian could not replicate the bug on a Google Nexus 6 or a Motorola Moto G – and entering that much text proved difficult and time consuming.Ībout 20% of the billion or so Android devices across the world run Google’s latest version called Lollipop, including new devices from Samsung, LG and Sony. By using the camera, the settings pull down menu and prompting the password entry screen the long text string could be pasted into the password box causing it to crash.

Being Google Cast ready, the new television will be able to stream content from smart devices, but without any Chromecast-like hardware. “We applaud these vendors for prioritizing security and releasing patches for these issues quickly.The researchers demonstrated the attack on a Google Nexus 4, and required the attacker to use the emergency call function to copy hundreds of characters to the clipboard. The new TV, enabling users to experience movies and shows directly from Google Play along with streaming of apps and play Android games with voice search, will become available later in the year. He also praises Mozilla, maker of the Firefox web browser, for including fixes since version 38. All projects going forward contain the required fix.”ĭrake praises the security firm Silent Circle, based in Geneva, Switz., which makes the Blackphone handset, for its quick response protecting users since it released PrivatOS version 1.1.7. We will update this when we hear back.)Īn HTC (HTC) spokesperson responded: “Google informed HTC of the issue and provided the necessary patches, which HTC began rolling into projects in early July. ( Fortune has reached out to these handset makers. Google’s major Android partners, which include phone-makers like LG, Lenovo (LNVGY), Motorola, Samsung (SSNLF), and Sony (SNE) were not immediately available to comment.

As Forbes reporter Thomas Fox-Brewster writes, device manufacturers will still need to push the updates out in order to safeguard their customers.

Foxfi android lollipop hack 2015