Critical Bluetooth vulnerability in Android

Re:Critical Bluetooth vulnerability in Android by m1r3k on Friday February 07, 2020 @06:19AM (#22264946)

My OnePlus 3 phone just got its last security patch and is now out of support from the manufacturer.

I use bluetooth constantly for my smartwatch and headphones.

I think it's time for custom firmware just because of this. Goodby banking apps and Google Pay, because apparently a newer but unofficial OS is more insecure [1].

[1] https://developer.android.com/training/safetynet

[ Parent | on HN ]

Re:Critical Bluetooth vulnerability in Android by guimoz on Friday February 07, 2020 @06:46AM (#22265101)

You can usually still pass safetynet with latest magisk, even on custom Roms. Go check the xda forums and you might find that.

[ Parent | on HN ]

Re:Critical Bluetooth vulnerability in Android by zozbot234 on Friday February 07, 2020 @06:55AM (#22265142)

> You can usually still pass safetynet with latest magisk, even on custom Roms.

It's unreliable by definition. You're better off keeping a device around with the stock OS on it, that you only use for SafetyNet-required stuff.

[ Parent | on HN ]

Re:Critical Bluetooth vulnerability in Android by m1r3k on Friday February 07, 2020 @06:51AM (#22265123)

I know there are means to defeat safetynet but honestly I was glad not to tweak my phones anymore and happy without a rooted firmware.

I remember the times of endless tweaking and patching after some Google Play services update a few years ago.

[ Parent | on HN ]