Heartbleed and Android - T-Mobile Samsung Galaxy Note 3

So I read today that several versions of Android are affected by the heartbleed vulnerability, among them being 4.4.2 on note 3. You can download a Heartbleed checker from lookout security to check. Question being, which custom roms have been patched? I'm ready to get rid of stock since it will likely be months before samsung, and then t-mobile finally do something about it.

Only Netflix it's an issue and I am not using it on my phone now, been a while.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

krelvinaz said:
Only Netflix it's an issue and I am not using it on my phone now, been a while.
Click to expand...
Click to collapse
what rom are you using?

Stock root 4.42

Is Note 3 really vulnerable to Heartbleed? Or the apps in my Note 3 is affected with it?

Lorettaa said:
Is Note 3 really vulnerable to Heartbleed? Or the apps in my Note 3 is affected with it?
Click to expand...
Click to collapse
As I understand it (and I may be wrong) if you go to a website that is vulnerable and you also happen to be using something like a mobile banking system on the phone that is secure, a hacker would be able to grab your information through the vulnerability of your phone.
Sent from my SM-N900T using Tapatalk

phil.culler said:
As I understand it (and I may be wrong) if you go to a website that is vulnerable and you also happen to be using something like a mobile banking system on the phone that is secure, a hacker would be able to grab your information through the vulnerability of your phone.
Click to expand...
Click to collapse
That is true on mobile or desktop. That is because the vulnerability is on the website. None my banks were vulnerable though.

We better be careful making transactions on our mobile devices.

Lorettaa said:
Is Note 3 really vulnerable to Heartbleed? Or the apps in my Note 3 is affected with it?
Click to expand...
Click to collapse
The version of OpenSSL on the Note 3 is affected (at the level that contains the bug) but is generally not vulnerable (the heartbeats option is not enabled) so it is technically considered safe at this point.
I will feel much better when the version of OpenSSL is updated to a version that does not contain the vulnerability at all.
Sent from my SM-N900A using XDA Premium 4 mobile app

glad to know its safe

Related

Skygo released this morning on Android.

Nexus not supported. Sky amateurs.
So which pro from here going to get it working?
Yeah, got the APK and it loads but won't sign in...No idea what Sky are thinking not supporting ICS, seeing as half the phones that it DOES work with are updating in a month
Here's the APK for those wanting to try to hack it...
Its not that it doesn't support ICS. The problem is it not supporting the Nexus. Someone needs to mod the apk to not check for what device is being used.
Sent from my Galaxy Nexus using XDA App
Doesn't work on my Sensation using ICS either, but fine once on GB
The app runs on the Nexus, you just can't sign into it
incredulous said:
Its not that it doesn't support ICS. The problem is it not supporting the Nexus.
Click to expand...
Click to collapse
No, it's ICS that it doesn't like. It won't run on my SGSII with stock 4.0.3 either. Apparently it would have been fine if I hadn't tinkered with it. The FAQ states that...
stupidBSKYB said:
Please note that if existing Sky Go users with V2.2 or 2.3 choose to upgrade to V4.0 they will not be able to stream content through the Sky Go app until the operating system can be fully supported. In order to ensure that our rights' contracts are fully upheld we are also unable to support any Android devices that have been rooted.
Click to expand...
Click to collapse
I can't see that being a popular policy in these here parts.
Yea I'm hoping someone at xda can get this to work with rooted phones
Sent from my Nexus S using Tapatalk
I've been asking on the SkyGo support forums, but after myself and a few others pushing for an explanation on what exactly defines a device as rooted (resulting in just Sky News working) sky have fallen silent, and their twitter support said "we just dont support them" (i.e rooted devices)
I tried the Voodoo OTA app (some user have claimed it has worked for them) but not me.
Does not work on my Gingerbread Galaxy Note either.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Sent from my GT-N7000 using Tapatalk
I am hoping one of the geniuses who frequent xda can get this working soon on a rooted nexus
So this works on a HTC Desire, but not on my Nexus One!?
Anyone know how to get it working on a Nexus One?
Have you guys seen this thread?
http://forum.xda-developers.com/showthread.php?t=1506967
Sent from my GT-I9100 using XDA App

Verizon GN Users: Disappointed there is no 4.04 update yet?

I know I am. But it just proves since we got it for Verizon all of the updates will be delayed from when GSM users get them
Suçks cause i thought we got the 4.02 update pretty quick.
I wonder if Sprint having basically the same phone will change anything?
Of course there is always CM9 or AOSP builds. But official stuff is always nice. Makes me wonder why they havent officially released it.
shark1987 said:
I know I am. But it just proves since we got it for Verizon all of the updates will be delayed from when GSM users get them
Suçks cause i thought we got the 4.02 update pretty quick.
I wonder if Sprint having basically the same phone will change anything?
Of course there is always CM9 or AOSP builds. But official stuff is always nice. Makes me wonder why they havent officially released it.
Click to expand...
Click to collapse
Nope. Not in the least disappointed.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
adrynalyne said:
Nope. Not in the least disappointed.
Click to expand...
Click to collapse
What this guy said.
nope. i didnt buy this phone for stock. i bought it for the dev support and ease of unlocking.
dont care about official updates
Zepius said:
nope. i didnt buy this phone for stock. i bought it for the dev support and ease of unlocking.
dont care about official updates
Click to expand...
Click to collapse
What ^ said
Sent from my Galaxy Nexus using xda premium
I'm running 4.0.4 just fine on my Verizon GNex.
stbxxl said:
I'm running 4.0.4 just fine on my Verizon GNex.
Click to expand...
Click to collapse
What this guy said
Sent from my Galaxy Nexus using xda premium

Europe and NFC

Guys,anyone using NFC around europe?
What are the services accepting our GNEX?
I hope to start a useful collection thread.
Well, at least in Germany and as far as I know there are no payment services available.
abnah said:
Well, at least in Germany and as far as I know there are no payment services available.
Click to expand...
Click to collapse
Thanks for sharing the awful absence of modernity :S
Sent from my Galaxy Nexus using Tapatalk 2
No use of it in Norway. They have some test projects with nfc, but nothing that uses Google wallet
Swype'ed on my CM10 Galaxy Nexus
Nothing in the Netherlands as well.
Sent from my Galaxy Nexus using Tapatalk 2
abnah said:
Well, at least in Germany and as far as I know there are no payment services available.
Click to expand...
Click to collapse
I think you can use NFC to get Train Tickets. At least i always see these "put-your-phone-here-to-get-tickets-thingys" at the Stations.
Never used it though.
Did anybody have a look at McDonald's?
I think I saw some wireless counters...
But maybe I'm hallucinating
Sent from my Galaxy Nexus using Tapatalk 2
Nothing in Switzerland.
Disabled it in France, can't use it anywhere...... just drains my battery
Sent from my Galaxy Nexus using xda premium
I just remembered some eu countries have Starbucks, not even that one accepts nfc???
Sent from my Galaxy Nexus using Tapatalk 2
donsaibot said:
I think you can use NFC to get Train Tickets. At least i always see these "put-your-phone-here-to-get-tickets-thingys" at the Stations.
Never used it though.
Click to expand...
Click to collapse
QR-code based. And you need to have an account on bahn.de, with credit card information stored.
(bahn.de (German))
QR is on your phone but to get the Ticket you use NFC
http://www.stern.de/reise/service/deutsche-bahn-startet-touch-travel-das-handy-als-fahrkartenautomat-1745683.html (German)
Thats how they look like
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Didn't knew that. I'll definitely have to try that sometime.
You have to have an account though and ad your adress and paying method and all that. I always pay cash for tickets so i don't use it.
Basically you have to use the touchpoint on the trainstation where you start and finish and it generates the prize i guess. Ticket Inspectors scan the QR code on your phone to check the ticket.
Problem is when your battery runs out you are out of luck.

Exchanged devices - bootloops and other issues

Please can a mod sticky this - please record any issues with recall exchanged devices ONLY. Thanks
Start message with BOOTLOOP or OTHER ISSUE.
It will be interesting to see whether the bootloop issue goes away with exchanges.
I'm only getting my exchanged unit this Sunday. I've been without my Note 7 for four days now, after bootloops bricked my phone. So it bricks before my battery exploded.
I'm keeping a very close eye on this thread.
BozQ said:
I'm only getting my exchanged unit this Sunday. I've been without my Note 7 for four days now, after bootloops bricked my phone. So it bricks before my battery exploded.
I'm keeping a very close eye on this thread.
Click to expand...
Click to collapse
I'm suspecting other issues may be present...I really hope not though. The damage that would do to Samsung...
Bad performance could be related to battery problems. I own N7 exynox and had no problem with the device. Now I'm waiting for the replace phone.
Sent from my SM-N920C using XDA-Developers mobile app
I think all those problems are battery related
Scheduled for an exchange on the morning of 17 Sep. Hopefully I'll have nothing to report here. Fingers crossed.
Well the first problem I've found...
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Cannot access s health or Samsung secure folder apparently caused by unauthorised software. No root. Just installed all apps that were on the previous note 7. Any ideas appreciated. I've emailed Samsung
Sent from my SM-N930F using Tapatalk
bonerp said:
Well the first problem I've found...?
?
Cannot access s health or Samsung secure folder apparently caused by unauthorised software. No root. Just installed all apps that were on the previous note 7. Any ideas appreciated. I've emailed Samsung
Click to expand...
Click to collapse
Some people have suggested plugging it into smart switch via pc or mac and running an initialisation and firmware recovery. Saw someone suggest it could be some battery testing software that Samsung have used before shipping and not taken back off. So a reinstallation should sort it. I can't verify personally as I'm STILL awaiting a replacement device but there's a few people with your issue it seems
Trying it now thanks
Sent from my SM-N920C using Tapatalk
http://forum.xda-developers.com/showpost.php?p=68690963&postcount=1860
Smart swirch suggestion
Sent from my Tab S using XDA Labs

Question Rooted Stock Android 13 on P6P shows Widevine L1, how is this even possible?

I'm not sure how this is happening although I guess it's nice to have this benefit, even though I don't watch much where Widevine L1 is required for HD. Curious if anyone has encountered this as well, or if maybe I'm seeing this incorrectly
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
level5music said:
I'm not sure how this is happening although I guess it's nice to have this benefit, even though I don't watch much where Widevine L1 is required for HD. Curious if anyone has encountered this as well, or if maybe I'm seeing this incorrectly
View attachment 5716511
Click to expand...
Click to collapse
I just checked mine and mine's L1 also, even though I'm rooted. Are you using the newest Chinese magisk alpha? I am.
Except for a few months maybe 2 yrs ago when I was using my Pixel 4 XL (there was apparently some kind of glitch going on then), mine has always (at least when I've checked) been L1 while rooted with the official Magisk.
Lughnasadh said:
Except for a few months maybe 2 yrs ago when I was using my Pixel 4 XL (there was apparently some kind of glitch going on then), mine has always (at least when I've checked) been L1 while rooted with the official Magisk.
Click to expand...
Click to collapse
Yep, as far as I'm aware this is because root is hidden, therefore the phone is masquerading as a normal, unrooted device, and can pass all necessary checks to play DRM restricted content.
Nope ! It's just that Google doesn't care if you're bl unlocked because their widevine runs in a secure context inside their magic titan chip, so even with root, you're supposed to be unable to hack it, so yeah they leave L1 cuz they have faith in their own system and even then, seriously ? Removing HD from bootloader unlocked devices ? What's the point even, but anyway, that's an OEM thing, not Google.
Hope it helped you in a way to understand this big mess that is widevine
Edit : https://en.wikipedia.org/wiki/Widevine
Here's the wiki page that'll help you understand the thingy about secure environnement like TEE (Trusted Execution Environnement iirc)

Categories

Resources