Recently, some parts of Europe and America by passes on NOKIA "SMS gate" vulnerability event to Saipan platform jiyou Jaron is panic, we are afraid of your own camera caught. The so-called "SMS gate" events, links to Saipan platform mobile phone users send a group SMS for specific content. Send a short message but, to receive this information on the user's mobile phone SMS feature will all fail, no longer receive any message content, but in this short message of mobile phone can only be achieved through the cell phone hard mesh way to return to normal.
Currently confirmed this trick in the model base for Saipan FP2 following platforms (i.e. 3.2 following platforms) models, including the UIQ platform models. And FP2 platform models and Saipan S60v5 platform of the camera is not this BUG. Fp1 models of camera basically to send as many as 11 such SMS will move in. But MR models (i.e. 3.0 platform) the following is just a piece of this short note is in the public and does not use SMS functionality. Must pass a thorough format camera.
Having said that, is there any way to prevent such incidents? "the answer is Yes, but this prevents software did not complete. Our ultimate goal or hope NOKIA official for those using older systems camera provides fixes the bug with the new firmware to update the phone system to be fully assured status!, we make our jiyou assured. This vulnerability is triggered only by an artificial way, and did not have the BUG itself spread effect. Therefore, do not be too tight!
For members about a currently in place to prevent the occurrence of such events is one of the better software, Anyi security guards.
Letter Anyi company as a professional mobile phone security company, the first time on an analysis of the event. After rigorous testing, we are sure that the installation of the guardian of the faith Anyi user is secure, and you do not need to do this choose message any other settings, this message will be handled correctly letter Anyi guard, protect user cell phone SMS module does not receive a letter, and the installation will automatically correct Anyi guards this message in error, the user does not need to fear and panic!
Has attacked the user can install letter Anyi guards to fix: just install the guardian, even if the letter Anyi your handset has been affected by the vulnerability of an attack, only need to install the letter Anyi Defender, you can see the incoming SMS, mobile phone back to their normal state, and protect the mobile phone is no longer subject to similar attacks.
Letter to the guardian to solve Nokia Anyi SMS vulnerability principle
Nokia S60 SMS vulnerability is the use of the symbian version "SMS processing engine" of a design error in the resulting "buffer overflow", or "overflow-style" attacks, so as to achieve the "DOS" (Deny of Service) attack.
This attack is the actual principle of work: victimization of cell phone risks when receiving SMS, mobile phone SMS processing module will attempt to resolve, but because the module design defects, when you see this message, cell phone text message processing module error occurs, but the module still does not stop retrying, which ultimately led to SMS processing module in this error, unable to continue to accept subsequent other normal SMS.
Letter to the guardian's don't do Anyi any special work can solve this problem, because the letter Anyi Defender has its own SMS processing engine, when installing a letter addressed to the guard, Anyi Anyi of SMS processing engine automatically put out of SMS take over correctly handle to release a mobile phone with SMS processing engine, has completed the processing of this vulnerability.
The above words also explains why only believe Anyi guard running, even if this vulnerability is not blocking text messages will not be a problem, because only believe Anyi running, the message will be the engine handles the letter Anyi, while the engine is not the letter Anyi this vulnerability, the vulnerability of this letter Anyi of processing is not a blocking issue, the essence is that SMS processing engine is vulnerable.
No comments:
Post a Comment