BlueBorn is still rampant and enough is enough: g'bye M3 and thanks for all the fish - Huawei Mediapad M3 Guides, News, & Discussion

In short:
- I bought my M3 in March 2017, EU version w/ Wi-Fi and 4G; I use it out of home.
- BlueBorn is a very bad vulnerability that affects Bluetooth protocol, and VERY NASTY exploits exist; only workaround available for M3: bluetooth off. Other firms have patched their products long time ago.
- I have the latest firmware available -B303 which is still vulnerable (https://play.google.com/store/apps/details?id=com.armis.blueborne_detector).
In conclusion: hardware is perfect but software prevents me to use the bluetooth functionality, so this item is to be considered broken (or better defective by design) withouth chance of repair. Flash a custom rom? No way, since unlocking the bootloader by software would affect the warranty on hardware (it was your choice, Huawei).
I called the reseller (not Huawei) to complain for this: I will send the item back soon and get a full refund.
BTW: European Union customer protection laws apply. YMMV. Reseller is responsible. Reseller may complain with Huawei (and I think it will, in my case). Sorry Brexiters.
End of story.
Goodbye Huawei and thanks for all the fish, but after four month, it stinks a lot.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

jcyb9 said:
- I have the latest firmware available -B303 which is still vulnerable (https://play.google.com/store/apps/details?id=com.armis.blueborne_detector).
Click to expand...
Click to collapse
I don't know if there are any hardware or firmware differences between models sold in the UK and EU, but just for anyone else's info, I just ran the same app on B303 on my UK, wifi-only version and got a clean bill of health. I'm relieved, but it's slightly surprising (to me at least) that the 4G version fails with what I assume is otherwise the same firmware release.
(Disclaimer: I'm new to Huawei devices so apologies if I'm missing something about hardware/ROM versions. I have BTV-W09C100B303 with 6th Nov Android patch level.)

Unfortunately BTV-DL09C100B303 is still vulnerable.
Just to be shure before packaging: I just started a check for new updates. Nothing found.

B352 came down on to my tablet just now! Includes the November 2017 patch level and is clear of BlueBorn.

CL0SeY said:
B352 came down on to my tablet just now! Includes the November 2017 patch level and is clear of BlueBorn.
Click to expand...
Click to collapse
Very good thing!

btv-w09c128b352 is the full build number.

CL0SeY said:
B352 came down on to my tablet just now! Includes the November 2017 patch level and is clear of BlueBorn.
Click to expand...
Click to collapse
check on another device (smartphone?) your bt-area with the app and "BTV-..." will be shown as vulnerable. so looks like not fixed.

Interesting - the scanner shows my Xiaomi mi5s as being potentially vulnerable remotely as well. It has December 2017 patch level. Running it from either device shows the local device as being OK though. Strange

Related

Apk Update Date? (Says Feb 1st 2016 on the Google Market)

The past year I have been putting together proof the Google Play store has been cloned by the government and is being used for remote surveillance, updating key apps with hacked versions. I am a former security clearance holding federal employee; know (ie it said they could years after leaving in my original paperwork) I have been watched for my standpoint on the crap the US government has pulled over the past 15 years. After Snowden things got worse for everyone who works (or in my case used to work) for the DoD.
I already have enough to think at least Google 2 Step Authentication (idiots used a Langley # on 2 Step phone Auth callback until I tried to blog about it over two years ago) has been thwarted, and now am going further down the rabbit hole. Once I decide how I am going to proceed (after talking to a lawyer) I will probably dump everything I have (as well as some other fun treats) on the surveillance here on XDA.
When did you update SuperSU? I am a paid user that keeps all my apps up to date DAILY and rarely miss a day hitting the play store to check.
Today I got an update alert for SuperSU. The update date says February 1st (Screen Shot Below) and yet it's February 21st. I did not miss 21 days of checking for updates; it was yesterday I last checked. I have not gotten an update for SuperSu since 2.52 and the latest says 2.65, so this update that just popped took at least 21 days to show up on my play store app.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Trying to figure out if this is a joke or not.
Is this true??
Sent from my GT-I9500 using Tapatalk
Wow... You typed out a back story and conspiracy theories just to ask about an update? Ever hear of this thing called a rollout? Google does the exact same thing with their updates, old date and all. Loosen the tinfoil please.
Sent from my Moto X Pure Edition using Tapatalk
Hello,
First of all this not the place for conspiracy theories. What you're describing seems like a simple issue with the Play Store. Nothing more and nothing less.
This thread will be closed so that you can sort this out. Try cleaning your cache, restarting your phone, etc.

Unpatched Oreo: DnsMasq - Heap buffer overflow vulnerability (P10 VTR-L29)

Avast Premier detects DnsMasq vulnerability, Huawei support was supposed to get back to me concerning the questions:
1. What patch am I running?
2. How can I check which patch I am running?
3. If the patch reported (System info: "1 February 2018" ) is false or defective, how is this solved?
This was more than two weeks ago now, and tbh I'm considering filing a complaint under EU law to have them buy back the phone
Any ideas on how to solve this issue? General tips on how to face Huawei support?
P10 VTR-L29 8.0.0.360 (C432)
Sweden
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
ROFL made my day.. law suit. ?
DallasCZ said:
ROFL made my day.. law suit. ?
Click to expand...
Click to collapse
What law suit?
Perhaps I should clarify:
What I am considering is to file a complaint (Consumer complaint to Huawei). Under certain circumstances, to which this case very much qualifies: Huawei would have to buy back the phone.
'EU law' was to shorten my post, referring to the consumer protection laws set by the European regulatory agencies.
...Anybody?
nobody cares... ??
I think you cannot complain and want money back because of software security updates. Just buy every year Google pixel phone and you will get all security patches every month. ?
Or don't use wifi tethering.
Or don't be so paranoid. ?
DallasCZ said:
nobody cares... ??
I think you cannot complain and want money back because of software security updates. Just buy every year Google pixel phone and you will get all security patches every month. ?
Or don't use wifi tethering.
Or don't be so paranoid. ?
Click to expand...
Click to collapse
Fair point.
Also: I guess I should have known better than having expected some kind of reaction, I mean F*©# me right!?
Well, I'll cut the crap and end with my core concern:
If we have accepted and become so used to being lied to, if we are so pessimistic that deception has become the norm and the call for basic decency is met with pitty and ridicule, what are we living in if not a dystopia?
Come on, It's only a mobile phone... nobody is lying to you and you should focus on more important things in life than some DnsMasq patch.
DallasCZ said:
Come on, It's only a mobile phone... nobody is lying to you and you should focus on more important things in life than some DnsMasq patch.
Click to expand...
Click to collapse
Actually yes:
"Android Security patch 1 February 2018" = Not true
so you was connected to your PC and internet connection was established from your mobile phone.

N9600 Wifi Calling & VoLTE enabled without root!

Hi folks,
Just discovered today that the newest software update on N9600 enables the Wifi Calling and VoLTE with my TracFone T-mobile SIM card!! I found this because when I was on the call it says "HD" on the screen, which I only saw on US version phones before.
My Dual SIM N9600 (likely from Hong Kong) has never been rooted or flashed with any CSC file. It's in its pristine official status except for the OTA updates every month. I remember that the VoLTE option was not available before this update, whenever I was trying to tap the "VoLTE" icon in the drop down menu it said "VoLTE is not available for this software version" blahblahblah. The June update is 500ish MB which I thought was bulky but didn't know why (in the What's New section of the update info it's just some very generic bs like improved performance and latest security patch)
I'm soooo excited about being able to use my phone on wifi with airplane mode on! :laugh::laugh: also the HD voice is really nice.
View attachment 4775540
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Wow great??can u check if it have Khmer language dispay and input keyboard?
biopig said:
Hi folks,
Just discovered today that the newest software update on N9600 enables the Wifi Calling and VoLTE with my TracFone T-mobile SIM card!! I found this because when I was on the call it says "HD" on the screen, which I only saw on US version phones before. My Dual SIM N9600 (likely from Hong Kong) has never been rooted or flashed with any CSC file. It's in its pristine official status except for the OTA updates every month. I remember that the VoLTE option was not
Click to expand...
Click to collapse
This is seriously great news. I've been planning to get a dual sim (exynos / snapdragon) so that I don't have to carry 2 phones (currently Note 9(960U1) and Note 5. One on T-mobile and another one on Mint mobile.
Would you please do a speedtest (speedtest.net app) on LTE/Data and post the screenshot. I am hoping the speed is good and if so Google Voice will work with out issue which is one of my requirement. I really don't like to go down the root/custom rom/CSC change route if I can avoid it.
If I buy on eBay, returning once opened will incur 20% or 25% restocking with the vendors I've shortlisted so like to avoid that.
Thanks much!
i see your on the TGY rom same here but in the latest update they have disabled it again!? now it says "volte is not supported by your current software version" are you experiencing this?
ms_office_95 said:
i see your on the TGY rom same here but in the latest update they have disabled it again!? now it says "volte is not supported by your current software version" are you experiencing this?
Click to expand...
Click to collapse
Interested to know. I guess he sold it after update. [emoji1787]
Sent from my EVR-L29 using Tapatalk

Android 12 is probably coming to Moto Edge 2020

Hi everyone, like you I have a Moto Edge 2020 (The one with the SD765G 6GB/128GB), I know most of you were upset after the official motorola A12 update list and not seeing our phone in that list.
While I read most of the forums, I found that in an official Lenovo forum, a developer said that there are no plans on releasing Android 12 on Moto Edge 2020
As of today (February 1st 2022), I sent a mail to Motorola España/Latinoamérica to get further information about the update rollout of Android 12, and to know if the Motorola Edge will be receiving that update.
They answered pretty quickly and said:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Which translated to english states:
Given the technical information at our disposal, your Motorola Edge "at the moment will stay on Android 11. It's programmed to receive security updates. It's planned to update the device to Android 12, but there is not exact date for that yet"
So it may seem that they WILL be updating the Moto Edge to Android 12, but not yet. I personally don't fall for that, but at least is some kind of hope.
One of the main reasons I want A12 is because of how buggy A11 is.
Have you tried using the Edge Triggers on moto gametime? After using them, the edge screen sensibility goes up to the clouds and the only way to fix that is to reboot the phone. There is plenty of bugs and things to fix on A11 that I think the best they can do is to release A12 as the final update and with future bugfixes make that the definitive (or at least trying to) version for Motorola Edge.
Let me know your thoughts this is my first XDA post ever, I hope you find it useful
nice news, sad how they butchered the edge display with android 11, i really like moto edge, but i got green tint, and was too lazy to send it back XD

Question g998u1 Mobile hotspot not work after updated OneUi5.0

g998u1 Mobile hotspot not work after updated OneUi5.0, I used redpocket (use At&t network). what should I do except flash oneui4.0?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Try to set up a new hotspot with your carrier.
Especially with Samsung's Rule 1 applies... if an OS is fast, stable and fulfilling its mission let it be! Firmware upgrades and updates can and do break devices. If it upgrades the bootloader too you're really boned.
This N10+ in my hand is still running on Pie, no firmware changes in over 3 years. Current load will be 3 yo in June; still fast and very stable with minimal maintenance. Security is not an issue.
That's what Android is capable of. You'll never realize this if you keep mucking with the firmware. I keep OTA updates disabled. I don't allow Wearable to flash firmware to my Buds+ anymore either after a recent one trashed the sound quality; it was a good flash that should have worked. They still need to be reflashed and rolled back to the factory shipped version
I got 2 other pairs so it's on the back burner.
blackhawk said:
Try to set up a new hotspot with your carrier.
Especially with Samsung's Rule 1 applies... if an OS is fast, stable and fulfilling its mission let it be! Firmware upgrades and updates can and do break devices. If it upgrades the bootloader too you're really boned.
This N10+ in my hand is still running on Pie, no firmware changes in over 3 years. Current load will be 3 yo in June; still fast and very stable with minimal maintenance. Security is not an issue.
That's what Android is capable of. You'll never realize this if you keep mucking with the firmware. I keep OTA updates disabled. I don't allow Wearable to flash firmware to my Buds+ anymore either after a recent one trashed the sound quality; it was a good flash that should have worked. They still need to be reflashed and rolled back to the factory shipped version
I got 2 other pairs so it's on the back burner.
Click to expand...
Click to collapse
Thank you so much, Blackhawk!! I contact the carrier and fixed the problem.

Categories

Resources