lundi 11 décembre 2017

Honor 7X Review

The Honor 7X is the latest in Honor’s long, evolving budget phone series. The Honor 5X and Honor 6X — its predecessors — were good phones for their respective prices, but the Honor 7x really hits the nail on the head in terms of design, performance, and camera capability. That’s why we think the Honor 7X is the best budget phone you can buy today, with a starting price of just $199.

Design

We got a preview of the Honor 7X’s aesthetic in this year’s Honor 8 Pro, which shares many of the same design elements. Honor adopted the 8 Pro’s brushed anodized aluminum unibody design for the new Honor 7x, and to great effect — it gives the phone a flagship-like look and feel. It’s almost entirely smooth on the back and front, with the dual-sensor camera bump the minor exception. And it puts the Honor 7X’s FullView screen front and center, which is a good thing: It stretches all the way to the edges of the device for an impressive 77 percent screen-to-body ratio, which makes the 5.93-inch, 18:9 2160 x 1080 (~407 PPI) aspect ratio display easy to reach with one hand. This display is similar in size and resolution to the OnePlus 5T, but Honor is using an IPS LCD, so colors aren’t as punchy as what you can find on the AMOLED 5T.

Huawei’s done a lot of work to make sure applications and games take full advantage of the 18:9 display. It’s tested over 200 of the top mobile games and 1,500 applications for compatibility, and apps that don’t support the 18:9 ratio natively will automatically expand to fill to take up the full screen, unlike some wide-aspect phones like the Galaxy S8, which requires the user to press the “expand” button to make apps go full-frame, so you don’t get those ugly black borders around the top and bottom. Additionally, Huawei’s partnered with Gameloft to optimize Modern Combat Versus, its popular multiplayer title, for the Honor 7X.

Launched in December of 2017, the Honor 7X is the next installment of Honor’s budget line of phones.

Performance

Honor 7x Specs
CPU HiSilicon Kirin 659, Octa-core4x Cortex-A53 @ 2.36GHz

4x Coretex-A53 @ 1,7GHz

GPU Mali-T830 MP2
RAM 3GB/4GB LPDDR3 (USA/ROW)
Battery 3,340mAh (5V/2A)

Thanks to Huawei’s new Kirin 659 system-on-chip (an octa-core chip featuring 4x Cortex-A53 cores running at 2.36GHz frequency and 4x Cortex-A53 cores clocked at 1.7GHz frequency), a Mali-T830 MP2 GPU, and up to 4GB of RAM, the Honor 7X offers a great software experience that you might not necessarily expect from a phone in its price range. While an increasing number of budget phones pack middle-of-the-road MediaTek processors, Honor stuck with an uncompromising processor with superior performance. Games and apps launch quickly and exhibit little-to-no stuttering, and the phone’s 3GB of RAM keeps things humming along smoothly even when multiple apps run in the background..

The Honor 7X packs a 3,340mAh battery that’s compatible with Huawei’s fast charging (5V/2A) technology, and its got a 3.55mm jack that packs Huawei’s HiSten 3D Hi-Fi sound. Other specs include a rear-mounted fingerprint scanner, Bluetooth 4.1, Wi-Fi 802.11 b/g/n (2.4GHz), a micro USB port, and a microSD card slot.

Display

The Honor 7X features a 18:9 display with a 1080 x 2160p resolution.

One of the Honor 7X’s headliners is the screen. It’s where most budget phones fall seriously short, but the Honor 7X bucks the trend — it has the best display you’ll find for $199. It’s the first phone from Honor to feature a full screen HD+ display, and it looks really good.

The 18:9 aspect ratio makes a huge difference when watching movies on your phone. Most use an anamorphic aspect ratio such as 21:9, and when a 21:9 video is squeezed into a conventional 16:9 smartphone display, letterboxing — the black bars on the top and bottom of your screen — occurs. The Honor 7X’s 18:9 display makes that ugly phenomenon a thing of the past — you’ll find that videos fill much more of the phone’s screen real estate, resulting in a bigger picture and that shows you more of the action.

We captured a few screenshots from the Honor 7X to highlight the difference. Check out this YouTube trailer from the 7X:

The Honor 7X’s aspect ratio doesn’t just deliver a better movie-viewing experience. When the phone’s in portrait mode, you’ll find that taller screen makes a big difference. We found browsing the web to be noticeably better with the larger screen.

Arguably just as important as the screen’s aspect ratio is its alignment with the phone’s body, which has the potential to impact its reflectivity and brightness. Luckily, the Honor 7X gets it right. The top and bottom bezels are the exact same size, drawing attention to the screen’s perfectly centered alignment on the phone’s front. It’s the optimal viewing angle, and it builds on the phone’s symmetry very pleasantly.

While the corners of the phone are rounded, the edges of the display are squared off to ensure that every last bit of the face is dedicated to the display. Honor didn’t mess around..

The display on the Honor 7X is centered in the body of the phone, making the top, bottom, and side bezels mirror their proportions exactly.

Camera

Honor 7X Camera
Main 16MP RGB shooter + 2MP secondary shooter, PDAF, LED flash / 1080p 30FPS
Selfie Front camera: 8MP, 1080p

The dual-lens camera on the Honor 7X consists of 16MP (with phase detection autofocus) and 2MP rear sensors and an 8MP selfie camera, and they don’t disappoint — the phone takes great pictures and impressive video. Additional goodies include portrait mode, “Beauty Mode” for those that need a little help in the skin complexion department, and gesture controls.

The default camera app is just as impressive. Honor goes a bit farther than most other OEMs — it tries to fit tons of shooting modes and effects in a single menu. There’s something for everyone..

Shot with wide-aperture mode to blur the background and focus on the foreground

Edited with color splash effect

Shot with one of the default filters

Price

After using the Honor 7X for a while, you’d expect a sky-high price tag. But the Honor 7X retails for just $199 in the USA and is available for pre-order now, a bargain by any stretch. Simply put, there are few phones you can get in this category that come close to comparing, and that’s why the Honor 7X is our pick for the best budget phone of 2017. The USA version gets you 3GB of RAM and 32GB ROM. The rest of the world pays about $50 more, but that gets you 4GB RAM and 64GB ROM. In both cases you can expand storage via microSD.

The Honor 7X comes in three colors, Aurora Blue, Gold, and Black, and is on sale in the United Kingdom, the United States, France, Germany, Italy, Spain, Poland, Ukraine, Turkey, Russia, United Arab Emirates, Saudi Arabia, Iran, Malaysia, and India. It’s available at brick-and-mortar stores and online today.

The Honor 7X has a dual-lens setup with 16 and 2MP sensors

More Honor 7x Videos:

Visit the Honor 7X Forums Get the Honor 7X



from xda-developers http://ift.tt/2AMLnrQ
via IFTTT

Samsung Galaxy A8 (2018) Manual Published on Samsung’s Website

We know that Samsung is gearing up to launch the Galaxy S9 and the S9+ in the first half of 2018, but they won’t be the only devices the company announces early next year. Samsung’s Galaxy A series is due for a refresh, and reliable rumors suggest that the next Galaxy A5 and the Galaxy A7 will ship as the Galaxy A8 and the Galaxy A8 Plus (2018) in coming months.

We’ve already seen leaked photos of the higher-end Galaxy A8 Plus (2018) bearing the model number “SM-A730” . Now, WinFuture.de has uncovered a manual for the Galaxy A8 (2018) with the model number “SM-A530” that gives a look at Samsung’s 2018 Galaxy A series, which features 18:9 displays.

Galaxy A8 (2018) Manual Galaxy A8 (2018) Manual Galaxy A8 (2018) Manual Galaxy A8 (2018) Manual

Manufacturers like Xiaomi and OnePlus are moving quickly to adopt the 18:9 display aspect ratio, and Samsung is poised to follow the industry trend. The 18:9 displays on the new Galaxy A8 (2018) series will have rounded corners. They won’t have curved-edge displays, though, which may be a plus or a minus depending on your perspective. But they will have fingerprint sensors below the camera instead of being off-center, fixing what’s arguably one of the biggest design flaws of Samsung’s 2017 flagships.

The loudspeaker appears to be placed right above the power button on both handsets, opposite the volume rocker. In single-SIM models of the Galaxy A 2018 series, the SIM tray for the nano-SIM slot sits on the left, and the memory card slot’s housed in the upper edge of the device, where it’s accompanied by a dual nano SIM slot on dual-SIM models.

The Galaxy A8 and A8 Plus (2018) will reportedly have curved glass backs, giving them a look and feel similar to Samsung’s flagship devices. However, it should be noted that the top and bottom display bezels in the 2018 Galaxy A series will likely be bigger than the Galaxy S8 and Note 8.

The Samsung Galaxy A8 (2018) will have a 3.5mm headphone jack, but one thing it won’t have is a button that activate’s Samsung’s Bixby assistant.

In terms of internals, the A8 (2018) is expected to have 4GB of RAM, while the larger A8 Plus (2018) willbe equipped with up to 6GB of RAM. The new devices are expected to be powered by the new Samsung Exynos 7885 SoC, which has a clock speed of 2.2GHz and will reportedly be fabricated on the company’s power-efficient 10nm process, and WinFuture.de reports that they’ll have a single 16MP camera on the back and a 16MP front camera.

The Galaxy A8 (2018) may have a 3000mAh battery, but it hasn’t been confirmed yet. According to the report, the A8 may have a 5.7 or 5.8-inch display and a 3000mAh battery, and both phones might launch with Android 7.1.1 Nougat.

Here’s hoping Samsung announces the phones soon.


Source: WinFuture.de



from xda-developers http://ift.tt/2C43Joo
via IFTTT

Google Home Max is Now Available in the U.S. for $400

In October, Google held a press briefing event where it announced Pixel 2 and the Pixel 2 XL, but smartphones weren’t the event’s headliners. There were a rew of things that Google managed to keep under wraps, and one of them Google Home Max, a premium speaker with Google Assistant integration. Starting Monday, it’s available for purchase in the United States.

When Google launched Google Home, a connected smart speaker, last year for $130, it was a hit. But some people wanted it to do more — especially when it came to audio. It wasn’t as far-fetched an idea as it sounded, considering companies such as Sonos built their entire brand on high-quality connected audio experiences.

So the Google Home Max was born. It had a hefty price tag, superior audio quality, and a mystery release date. Google initially pegged December as the release month, and in late November, a leaked Best Buy product listing for the Google Home Max suggested a release date of December 11th. It turned out to be spot on.

So far, only a few retailers are selling the Google Home Max, but you can purchase it right now from either Verizon Wireless or Best Buy. It’s listed on the Google Store. but there’s no way to add it to your cart yet.


Via: Pocketnow



from xda-developers http://ift.tt/2klHwud
via IFTTT

Andy Rubin Returns From Leave of Absence at Essential

A couple of weeks ago, it was reported that Andy Rubin, the founder of Essential Products, was taking a leave of absence from the company for “personal reasons.” That worried investors roiled by the launch of the startup’s first smartphone, which hasn’t been selling well. But the company’s backers can rest easy, now: Late last week, Mr. Rubin returned to Essential in his former role.

Mr. Rubin’s surprise announcement followed a report from The Information, which revealed that Google, his former employer, had conducted an internal investigation on Mr. Rubin’s “behavior” with a female co-worker. The woman involved reported his conduct to Google’s HR department, which later found that Mr. Rubin acted “inappropriate” because he violated Google’s policy against relationships between coworkers in the same division.

Mike Sitrick, a spokesperson for Andy Rubin, responded to the report, saying that any relationship that Mr. Rubin had while at Google was consensual. But now, Mr. Rubin has other problems to worry about.

Essential’s development team has made improvements to the Essential Phone‘s camera, which many in the tech press cited as a disappointment, and it’s launched a beta test for Oreo, which also brings support for Treble. But it’s remained mum on its plans for a smart home hub system that can control appliances, connected lightbulbs, and more from a standalone device.

With Mr. Rubin back in the saddle, maybe Essential’s plans will get on track. Here’s hoping.


Source: Recode



from xda-developers http://ift.tt/2BZPjpj
via IFTTT

Best Budget Phone of 2017

If you’ve shopped for an affordable smartphone recently, you know just how challenging an undertaking it can be. While most phones around the $200 mark aren’t exactly best-in-class, some manage to surpass expectations — but they can be tough to find. To make things easier, we rounded up the best budget phones of 2017. Here’s a list of our top three picks.

Our criteria for the best “budget” smartphone

Picking the year’s best smartphones is a lot easier if money’s no object, but most folks don’t have that luxury — nor does it make sense to spend $500+ for a phone when you can smartly shop the budget phone category, save a lot of money, and have a really great phone for years to come. To help make this decision easier, we developed a three-prong methodology to whittle down the list.

We looked for phones that punched above their weight class:

  • They had to deliver on value. Our picks offer compelling features for their price brackets. Whether that means an innovative design or a wealth of accessories, these devices distinguished themselves from the rest. We tried to find phones that sell for around $200 brand-new.
  • They had to have a supportive community. Our selections are more than just great products in and of themselves. XDA’s all about community and development, and we chose the phones that are supported by passionate developers and development teams. These phones, regardless of OEM support, are likely to enjoy software updates and mods for years to come thanks to a strong development community, and it’s always nice to have the option to change ROMs or get root access.
  • They had to have great hardware. We chose phones that offer fantastic hardware for the money. They’re not packing run-of-the-mill processors from an off-brand you’ve never heard of; they’ve got solid specs, translating to amazing performance whether you’re running multiple apps or playing the latest games. Additionally, all of these phones are made with premium materials, so they feel great in the hand.

 

Runner-up 1: Moto G5S Plus

Moto G5s Plus Specifications
Dimensions 153.5 x 76.2 x 8 mm
Weight 168g
Software Android 7.1 (Nougat)
CPU Qualcomm MSM8953 Snapdragon 625 Octa-core 2.0 GHz Cortex-A53
GPU Adreno 506
RAM and Storage 64 GB, 4 GB RAM or 32 GB, 3 GB RAM
Battery 3000 mAh battery
Display 5.5 inches, 1080 x 1920 pixels (~71.3% screen-to-body ratio)
Wi-Fi 802.11 a/b/g/n
Bluetooth Bluetooth 4.2 LE
Ports microUSB 2.0
Rear Cameras Dual: 13 MP, f/2.0, autofocus, dual-LED dual-tone flash
Front Camera 8 MP, f/2.0, LED flash

Motorola phones don’t tend to steal the spotlight very often, but the company’s been putting out really good phones in recent years. They’ve done especially well in the budget department — Motorola’s G series have always impressed with their quality and performance.

The Moto G5S Plus keeps with tradition: It’s got everything you’d want in a budget phone, including a 1080p display, a Qualcomm Snapdragon 625, up to 4GB of RAM, and a 3000 mAh battery. The G5S Plus earns bonus points for its Turbo Charge technology that delivers up to six hours of power in 15 minutes, its fingerprint sensor, NFC, and the ability to shoot in 2160p. That’s not to mention its background-blurring dual 13M cameras, a first for the G series, and its front-facing camera flash.

The G5S Plus’s affordable price and Snapdragon system-on-chip has fueled helped to attract a dedicated following. If you’re looking to customize the look and feel of your smartphone, there are plenty of different ROMs and kernels to choose from on the XDA forums.

The Moto G5S Plus is $279.99 from the Motorola website. Check out the Moto G5S Plus forums on XDA.

Runner-up 2: Sony Xperia XA1

Sony Xperia XA1 Specifications
Dimensions 145 x 67 x 8 mm (5.71 x 2.64 x 0.31 in)
Weight 143g
Software Android 7.0
CPU Mediatek MT6757 Helio P20 Octa-core (4×2.3 GHz Cortex-A53 & 4×1.6 GHz Cortex-A53)
GPU Mali-T880MP2
RAM and Storage 32 GB, 3 GB RAM
Battery 2300 mAh battery
Display 5.0 inches, 720 x 1280 pixels (~70.9% screen-to-body ratio)
Wi-Fi Wi-Fi 802.11 a/b/g/n
Bluetooth Bluetooth 4.2 LE
Ports Type-C 1.0
Rear Cameras 23 MP (f/2.0, 24mm, 1/2.3″)
Front Camera 8 MP (f/2.0, 23mm, 1/4″)

Sony has a habit of charging a lot for its phones, so it’s nice to see the company put out a great budget device, too. The Xperia XA1 has all of the style and sexiness that you’d expect from a Sony phone, but at a price point that’s likely to be in line with more people’s budgets.

For just $259.50 on Amazon, you get a compact device a 5-inch display, a Helio P20 system-on-chip, 3GB of RAM, and 32GB of storage . You also get a USB Type-C port to charge the battery, which lasts an impressive 72 hours on a charge, and a 3.5mm headphone jack that doubles as an FM radio antenna when plugged into a pair of smartphones. While this phone is not a part of Sony’s “compact” series of phone, it is indeed petite with just a 5.0″ display, making it perfect for one-handed usability.

Perhaps the Trojan horse of the Xperia XA1, though, is its camera. It’s 23MP sensor, and it’s been praised for its excellent low-light performance and outstanding clarity.

If you’ve been wanting to try out a Sony phone for a while but haven’t been willing to spend an arm and a leg, the Xperia XA1’s the best bet yet. And Sony’s judicious firmware policy, which has helped to spawn dozens of ROMs and customs kernels, is icing on the cake. You can pick up the Xperia XA1 in black, white, gold and pink.

While there’s no development for this phone yet, keep a close eye on the forums as more people get this phone. Check out the Xperia XA1 forums on XDA.

Winner: Honor 7X

 

Honor 7X Specifications
Dimensions 156.5 x 75.3 x 7.6 mm
Weight 165g
Software Android 7.0 EMUI 5.1
CPU Kirin 659 Octa-core (4×2.36 GHz Cortex-A53 & 4×1.7 GHz Cortex-A53)
GPU Mali-T830 MP2
RAM and Storage 64 GB/4 GB RAM (L21) or 32/64 GB/4 GB RAM (L22) or 32 GB/3 GB RAM (L24)
Battery 3340 mAh battery
Display 5.93 inches, 1080 x 2160p, 18:9 ratio (~77.0% screen-to-body ratio)
Wi-Fi Wi-Fi 802.11 b/g/n
Bluetooth Bluetooth 4.1
Ports microUSB 2.0
Rear Cameras Dual: 16 MP (1/2.9″, 1.25 µm) + 2 MP
Front Camera 8 MP, 1080p

If you’ve seen some of our latest videos on the Honor 7X, it probably comes as no surprise that it’s our pick for the best budget smartphone of 2017. The Honor 7X comes at the insanely low price tag of $199, and has a premium quality body and a FullView 5.93-inch display that outclasses most phones in its category. You’d be hard-pressed to find a phone that performs well for less.

The Kirin 659 chipset is paired with 3GB or 4GB of RAM, which translates to swift and speedy performance. Applications launch quickly and without lag or stuttering, even when you’re playing graphics-intensive 3D games.

But by far the most most attractive part of the Honor 7X is its screen, which has a 18:9 aspect ratio and 1080x2160p resolution. The 77 percent screen-to-body ratio looks spectacular — it’s the perfect balance between style and comfort, giving you plenty of screen space while just enough bezel to get a solid grip.

As far as community development support, thanks to the recent release of kernel source for the 7X, we expect to see many popular ROMs and kernels come out for the 7X in the coming months, just like we did with other Honor phones that saw kernel source release such as the Honor 8 and Honor 5X.

We’ll say it again: At $199, the Honor 7X a tough phone to beat. Check out the Honor 7X forums on XDA.



from xda-developers http://ift.tt/2BAqRxI
via IFTTT

Action Launcher Updated to v32, Adds 200 More Icons to AdaptivePack

Android gets a lot of love from the development community thanks to its vast number of customization options. People love to personalize their devices, and it doesn’t get much more personal than Android’s home screen, which lets you swap out wallpapers, add widgets, and reorgnize application shortcuts. Still, some folks want even more ways to customize their devices, and that’s where third-party home screen replacements come in. Action Launcher is one of the most popular, and to celebrate its fifth birthday, developer Chris Lacy has released the newest edition, version 32.

Version 32 a “spit and polish” update that focuses more optimization and stabilization than new features. The biggest user-facing change is the addition more than 200 icons to AdaptiveIcons, a companion application that allows Lollipop, Marshmallow and Nougat devices to take advantage of Android Oreo‘s Adaptive Icons feature

Action Launcher v32 Changelog

  • All new installs of the app will default to a Pixel Launcher 2 style appearance.
  • Key features such as the dock search box and Oreo style app shortcuts no longer require the Plus upgrade.
  • For Android 8.1’s users, an Oreo style banner displays in the settings requesting the Storage permission, so that Action Launcher can access the device’s wallpaper for its Quicktheme feature.
  • The recent focus on performance and bug fixes continues, with boot time optimizations and a bunch of key bug fixes.

Version 29 of Action Launcher was released a couple of months ago, and its standout addition was the fully customizable Pixel 2 style search bar in the dock. The transition of the Google search bar under the dock icons is one of those changes which some people enjoy but others really dislike. So it’s great to have a custom launcher that has the option of using it or not. Later that month Action Launcher users received another update to version 30 which included the “at a glance” search widget, colored search box icons, and more.

Action Launcher has received a number of updates this year, and it’s only gotten better over time. Back in July of this year, it received an update to version 26 that added Google Now integration, support for Android’s new Notification Dots feature, Android 8.0-style app shortcuts. Version 28 of Action Launcher, meanwhile, marked the launch of AdaptivePack.

The newest release of Action Launcher is available at the source link. If history is any indication, though, it won’t be long before there’s a new update.

 


Source: Chris Lacy



from xda-developers http://ift.tt/2iSc0Ud
via IFTTT

Janus Vulnerability Allows Attackers to Modify Apps without Affecting their Signatures

Android is installed on a huge large number of devices, and that makes it a target for malicious attackers. Vulnerabilities in Google’s mobile operating system continue to be discovered every month, but the good news is that Google is usually diligent about fixing them in regular security patches which are then offered to OEMs, who then ship it to devices.

Recently, security researchers uncovered a vulnerability which tricked users into allowing attackers to record their device’s screen. That particular exploit was fixed in Android Oreo, but analysts at GuardSquare recently reported another serious vulnerability which affects Android apps signed by an older signature schemes.

GuardSquare‘s report states that the Janus vulnerability (CVE-2017-13156) in Android allows attackers to modify the code in applications without affecting their signatures. The report goes onto say that the root of the vulnerability is that a file can be a valid APK file and a valid DEX file at the same time.

Janus takes advantage of the fact that extra bytes go unnoticed in APK files and DEX files. The GuardSquare report explains that an APK file is a ZIP archive which can contain arbitrary bytes at the start, before and between its ZIP entries. The JAR signature scheme only takes into account the ZIP entries, ignoring any extra bytes when computing or verifying the application’s signature.

It goes on to explain that a DEX file, on the other hand, can contain arbitrary bytes at the end – after the regular sections of strings, classes, method definitions, etc. Therefore, a file can be a valid APK file and a valid DEX file at the same time.

GuardSquare also mentions that a key element of the vulnerability is a “harmless” feature of the Dalvik/ART virtual machine. The report states that in theory, the Android runtime loads the APK file, extracts its DEX file and then runs its code. However, in practice, the virtual machine (VM) can load and execute both APK files and DEX files. The issue is that when the VM gets an APK file, it still looks at the magic bytes in the header to decide which type of file it is: DEX or APK. On finding a DEX header, it loads the file as a DEX file. If it doesn’t find a header, it loads the file as an APK file containing a zip entry with a DEX file. Thus, it can misinterpret dual DEX/APK files.

GuardSquare says that an attacker can leverage this duality feature of the VM to add a malicious DEX file to a normal APK file without affecting its signature. The Android runtime will accept the APK file as a valid update to a legitimate earlier app version, but the Dalvik VM will load the code from the DEX file, which has been injected with malicious code.

Normally, whenever a user installs an updated version of an app, the app’s signature is verified by the Android runtime to ensure that it matches the older version. When the verification is positive, the updated application gets the permissions which had been granted to the original application. In this way, attackers can use the Janus vulnerability to bypass the signature verification process and get unverified code installed on the devices of unsuspecting users.

What’s even worse is that this unverified code may get access to powerful permissions. This gives rise to some severe possibilities. GuardSquare states:

“An attacker can replace a trusted application with high privileges (a system app, for instance) by a modified update to abuse its permissions. Depending on the targeted application, this could enable the hacker to access sensitive information stored on the device or even take over the device completely. Alternatively, an attacker can pass a modified clone of a sensitive application as a legitimate update [which] can look and behave like the original application but inject malicious behavior.”

The company added that as of now, they hadn’t seen any applications exploiting Janus in the wild. The other bit of good news is the vulnerability requires a user to install a malicious update from a source outside the Google Play Store. Therefore, users who limit app installs to the Play Store are protected.

The Janus vulnerability affects devices running Android 5.0+. Applications that have been signed with APK signature scheme v1 are affected. APKs signed with signature scheme v2 are protected against the vulnerability. This requires that the APKs are running on devices supporting the latest signature scheme (Android 7.0 and newer). Scheme v2 is protected because unlike scheme v1, it considers all bytes in the APK file.

“Older versions of applications and newer applications running on older devices remain susceptible. Developers should at least always apply signature scheme v2,” GuardSquare states.

GuardSquare reported this issue to Google on July 31, 2017, and received acknowledgment on the same day. The company’s report says that Google released a patch to its partners in November, and published the bug (CVE-2017-13156) in the Android Security Bulletin on December 4, 2017.  The vulnerability has been fixed in the December 2017 Android security patch. Separately, F-Droid applications from their official repository have been confirmed to be safe. Lastly, it has been confirmed that the vulnerability has been patched on APKMirror.


Source: GuardSquare



from xda-developers http://ift.tt/2AKNJHK
via IFTTT