Aria (and other Android 2.1 phones) security patch.

Contributor

Aria (and other Android 2.1 phones) security patch.

[ Edited ]

Since almost 2 month now there is a security vulnerability published in all versions of Android before 2.2. See http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1807 for details. Including practical proof of concepts existing on the Android Market. http://threatpost.com/en_us/blogs/image-day-fake-angry-birds-android-app-111810

First I sent an e-mail to at&t requesting some information on what the plan is to release a patch for this. The reply asked me to call 611 and ask for technical support.

Lauren from tech support then told me she had never heard of this issue and that AT&T is not responsible for the OS on the phone, it's the responsibility of the device maker HTC. She was nice enough to get me the HTC customer support number.

So next I called HTC and asked the same questions. Their claim is that they have no control over Android. So I said, but this is fixed in 2.2, so when will you release 2.2 for the Aria?

Well, supposedly it's not their call, they are just contract manufacturing for AT&T and it's up to AT&T to request a new version of the OS.

And now the kicker. 'If we were ever to release a version of Froyo for the Aria it would be a very minimal version, since the hardware is not powerful enough.' This from HTC tech support.

 

In any case, I'm really disappointed in them passing the buck back and forth and will from now on select carriers and phone makers that are more up to date on getting patches out.

 

BTW. I'm not even asking for an update to Froyo, that's a different story. I want a patch for the public vulnerability on a phone that is barely 3 month old.

Message 1 of 4 (2,819 Views)
Tutor

Re: Aria (and other Android 2.1 phones) security patch.

There is a 2.2 for the Aria. It is based on the Gratia (Aria for Europe) ROM. go to XDA to get it. dont count on ATT for anything OS related. The Aria can handle 2.2 very nicely, including Live Wallpapers.

Message 2 of 4 (2,714 Views)
Tutor

Re: Aria (and other Android 2.1 phones) security patch.

I am dumb to getting updates on phones.  Where do I go to get this?  I know you said XDA, but is that a website or what?

 

Please forgive me when if this seems common sense.  I have only had Windows based phones for a long time until I bought the Aria.  We all know Windows based are not great with trying to get anything accomplished, I gave up on that a long time before going to the Aria.

Message 3 of 4 (2,588 Views)
Professor

Re: Aria (and other Android 2.1 phones) security patch.

 


mdestis wrote:

I am dumb to getting updates on phones.  Where do I go to get this?  I know you said XDA, but is that a website or what?

 

Please forgive me when if this seems common sense.  I have only had Windows based phones for a long time until I bought the Aria.  We all know Windows based are not great with trying to get anything accomplished, I gave up on that a long time before going to the Aria.


 

XDA is a website.  He is talking about custom ROMs, which are not official updates, but user created software.  You would need to root the phone, and then flash the new ROM to your phone.  All of this has some risk, as they violate your warranty, and have a (tiny) risk of disabling the phone permanently.  Custom ROMs tend to be my preference, as the other reply mentioned, they get updated much faster than "official" ATT software, and are clean of the useless bloatware that ATT loves to put on their phones, and also run much faster and smoother.  But this type of thing is definitely moving out of the realm of "common sense" and more into the realm of people who like to tinker with their phones.

 

 

 

 

Message 4 of 4 (2,579 Views)
Share this topic
Announcements

Welcome to the AT&T Community Forums!!! Stop by the Community How-To section for tips on how to get started.

Additional Support