[r1ch]

This looks very scary, especially given how many Android devices are out there that receive few or no security updates.

[padde]

Agreed. And just checked - my Samsung Galaxy S8 is vulnerable, no update available. Thanks Samsung!

This one will get nasty...

[wohlergehen]

Well, I've been meaning to root mine and flash crDroid... This is certainly the final push.

They state 10% of all Android devices are vulnerable and won't get patches, and since the vulnearbility is arguably wormable I can't see how these devices will stay clean.

[yumaikas]

Does keeping the BlueTooth radio turned off help here?

[sevensor]

I have the same question -- I turned off the Bluetooth radio on my phone the day I got it, and I've never turned it back on. But does that mean the radio is actually powered down, or is the phone blocking Bluetooth at a higher level? Similarly, or possibly the same question, is an rfkill soft block adequate for a laptop with bluetooth?

[kelnos]

On a laptop, if you want to be sure, you can at least do `sudo modprobe -r btusb` (or whatever your particular chipset's BT driver is called).

[sevensor]

A very good point -- that's definitely better than rfkill.

[carlmr]

At this point in time buying Samsung is just a bad decision. Have you checked out custom ROMs?

[voltagex_]

I got the August security update yesterday - how do I check if I'm vulnerable?

[kreneskyp]

For android: https://play.google.com/store/apps/details?id=com.armis.blue...

[voltagex_]

Thanks. Yep, the S8+ updated yesterday is vulnerable.

[AlfeG]

On other hand. My MiBox 3 suddenly received update.