topic Re: SPECTRE & more in Android

SPECTRE & more

Anonymous — Sat, 06 Jan 2018 19:50:31 GMT

Hi All,

Based upon recent news it is apparent that most CPUs including ARM based will be affected by one or more of the 3 exploits revealed by Googles Project Zero team.

My S8 is currently on Android v7.0 Samsung Experience version 8.1, Security Patch level 1 November 2017

I have established the Snapdragon 835 will require patching but am unable to identify any information as to when this will be released. I presume by Google via an OS Security patch.

Any info would be appreciated.

TIA

Re: SPECTRE & more

MI5 — Sat, 06 Jan 2018 19:53:41 GMT

Google have already said that the latest security updates protects this issue.
Your Nov patch should have it in already.

Re: SPECTRE & more

MI5 — Sat, 06 Jan 2018 19:57:29 GMT

Actually it looks like it's the December update that's required https://support.google.com/faqs/answer/7622138

Re: SPECTRE & more

Anonymous — Sat, 06 Jan 2018 20:07:17 GMT

Thanks for the prompt response, I do hope so!

Re: SPECTRE & more

MI5 — Sat, 06 Jan 2018 20:09:21 GMT

No need to panic, for sure.

Re: SPECTRE & more

Anonymous — Sat, 06 Jan 2018 20:12:14 GMT

Oh ! Just seen this ! Now its January 2018 this leads to further questions...?

Which month in 2018 can I expect the Dec 17 security patches 😕

Re: SPECTRE & more

jonsie — Sat, 06 Jan 2018 20:16:30 GMT

No one can answer that question I'm afraid.

Maybe @Chris_K can update.

Re: SPECTRE & more

MI5 — Sat, 06 Jan 2018 20:24:32 GMT

It all depends if you are on O2 or generic Samsung firmware?

Re: SPECTRE & more

Bambino — Sat, 06 Jan 2018 20:52:08 GMT

There is no evidence, at the moment, that the flaws are being exploited in the wild. By the same token, there is also no way for people to protect their devices other than to wait for security updates from their respective manufacturers. It's out of the individual's hands. We're all in the same boat and we all just have to wait.

Re: SPECTRE & more

jezza1234 — Mon, 08 Jan 2018 14:01:03 GMT

I agree there is no evideince to date that any of these hitherto un publicised weakness' have been exploited.

Lets face it no one really was aware of them until now.............

This may well become a self fullfilling prophecy. If no one has broken in yet you can bet your bottom that depsite all of the impending security fixes there is someone somewhere now working on a hack. No publicity like bad publicity....

Is it me?

Re: SPECTRE & more

MI5 — Mon, 08 Jan 2018 14:47:12 GMT

‘‘Tis true enough.