topic Re: Heartbleed bug Android 4.1.1 Xperia E? in E Series

Heartbleed bug Android 4.1.1 Xperia E?

agape — Mon, 14 Apr 2014 06:08:02 GMT

Google has released a report that android 4.1.1is vulnerable to Heartbleed bug.
http://googleonlinesecurity.blogspot.in/2014/04/google-services-updated-to-address.html?m=1
Xperia E's latest firmware 11.3.A.2.23 runs on Android 4.1.1. Google has released a patch fix. But when is Sony going to release the patch for Xperia E's firmware?

Re: Heartbleed bug Android 4.1.1 Xperia E?

agape — Mon, 14 Apr 2014 06:17:49 GMT

I used Lookout's Heartbleed detectors app, and it says the device is vulnerable. Has Sony addressed this issue officially? Why hasn't Sony yet informed its users formally?

Re: Heartbleed bug Android 4.1.1 Xperia E?

acemod13 — Mon, 14 Apr 2014 08:01:46 GMT

Vulnerability confirmed.

Re: Heartbleed bug Android 4.1.1 Xperia E?

RTB — Tue, 15 Apr 2014 10:27:04 GMT

Bought my Experia E only a few days ago to now find that it is potentially unusable due to a flaw in the OS.

I have installed a Heartbleed detector and have confirmed that the phone is vulnerable.

It would be good to think that Sony will not leave all of the Experia E users with phones they can no longer use.

Re: Heartbleed bug Android 4.1.1 Xperia E?

agape — Tue, 15 Apr 2014 16:36:17 GMT

Lookout's app says the device is vulnerable, and the KSMobile's app scans the apps on the device and says the apps are not vulnerable. How exactly the heartbleed bug in Android can be exploited is not clear yet, and what it means to have the OS vulnerable but the app not vulnerable is too not clear. We can only wait for Sony to address the issue. I have sent an email to them, and they haven't replied yet. Hope Sony hasn't killed the 1-year old Xperia E internally yet.

Re: Heartbleed bug Android 4.1.1 Xperia E?

agape — Tue, 15 Apr 2014 17:00:19 GMT

The BBC has an article on the bug in android
http://m.bbc.com/news/technology-27020256
Excerpts from the article:
-HTC has confirmed that it will fix the vulnerable devices.
-Sony and Huawei have not yet made statements on the issue.
-The vulnerability on the phones can be exploited to steal credential information like banking password by designing websites or ads that can peep into the other open tabs in the browser.
So, until Sony fixes, or if Sony never fixes, users should probably refrain from using the phone for sensitive activities like banking or shopping. Use your computer instead.

Re: Heartbleed bug Android 4.1.1 Xperia E?

agape — Wed, 16 Apr 2014 06:34:43 GMT

Sony has replied to my query:
"
In response to your query, we would like to
inform you that Sony Mobile Communications
have not yet identified any such kind of bugs in the latest software of your device.
However, we have taken this as a valuable
feedback and will surely look after it.
Also, we would like to inform you that
software updates are released at different times depending on operator and country. Therefore, we cannot give you an exact date for when a
specific update will be available for your
device.
"

Re: Heartbleed bug Android 4.1.1 Xperia E?

R0987 — Thu, 01 May 2014 17:23:59 GMT

So sony is just gonna ignore this arent they. This is not a simple software bug but our senitive data that is at risk

Re: Heartbleed bug Android 4.1.1 Xperia E?

agape — Fri, 02 May 2014 16:28:25 GMT

Yeah, but who cares? A responsible company would have released an official statement confirming whether the device has the bug. Sony is too busy marketing the Z series that they don't have time to care about their low end phones which are just a year old.Probably they just want to ignore the bug pretending it isn't a big deal. Just read the reply I received via e-mail, they seem to be so casual about this bug. I think there are other companies that behave more responsibly than how Sony does. How can anyone trust Sony for a smartphone again? A company's true dedication to its customers is proven only in crises like this. Sony has failed miserably.

Re: Heartbleed bug Android 4.1.1 Xperia E?

agape — Fri, 02 May 2014 16:39:32 GMT

Just try to avoid using your phone for banking or shopping and use your computer instead whenever you can. Also mail the customer support from different countries, enquire if the device is absolutely safe, and post the replies here.

Re: Heartbleed bug Android 4.1.1 Xperia E?

agape — Sat, 03 May 2014 06:15:06 GMT

If you must use your phone for banking etc.,then follow these steps to minimize the chances of mishap:
1. Use a secure and trusted browser like Chrome or Firefox for sensitive activities.
2.Keep your browsers always updated.
3. Before you do sensitive activities, clear all cache and cookies in the browser.
4. Do not open multiple tabs, do not browse other websites while doing sensitive activities. Keep just one tab open.
5. After completing your activity, clear cookies and cache again.