Stagefright vunerability and NOW

Stagefright vunerability and NOW SearchSearch
Author Message
marc bazimon
New member
Username: Marc_orange

Post Number: 39
Registered: 01-2007
Posted on Wednesday, August 12, 2015 - 02:46 pm:   

Hi nowsms team
Our fraud department warn us regarding a vulnerability that impact 95 % of the android devices. The workaround is simple , it is to uncheck the automatic fetching or download a patch from Google. The vulnerability is explain on the link below.

https://blog.lookout.com/blog/2015/07/28/stagefright/

Now , for an operator , the goal is more to apply a workaround on the mmsc side.

the workaround could consist on a minimizing of the size , or to avoid video reading or more complex ,or having by example the Capacity to support anti-virus like Fortinet below which includes signatures for Stagefright.

are you aware about the vulnerability and is it possible to have an antivirus on the mmsc itself ?
mms size modification is ok , i will find the way to avoid video on the forum support .

Br
Marc
Des - NowSMS Support
Board Administrator
Username: Desosms

Post Number: 5403
Registered: 08-2008
Posted on Thursday, August 13, 2015 - 03:57 pm:   

Hi Marc,

There iis an ability to block all video, but it is applied after submission, which may confuse end users.

Restricting message size may be an option, but again, not a good user experience. And might an offending video be small?

We need to think on this.

Do you know if the virus scanner you mention can work with raw binary MMS, or only extracted video file?

--
Des
NowSMS Support