Will Stagefright kill Android?
0
Howard DeAlvarado
Will Stagefright kill Android?

stagefright
I’ve been a big fan of Android phones since day one. I went from using a Blackberry to an Android and never looked back. Of course with features and versatility comes risk. Over 950 million Android phones are out there being used every day. We store our phone numbers, e-mails, calendars, private notes and all kinds of other important data on our phones.

A security vulnerability that could hack, steal or even erase your data is a serious problem

So when a security vulnerability is found in the Android operating system that could hack, steal or even erase that data…that’s a serious problem. It’s called the Stagefright vulnerability (aka Heartbleed for Android).

It was found by Joshua Drake, a security researcher, back on April 9th. He reported it to Google and they released a fix shortly afterward to our wireless carriers. What can happen is a hacker sends you a multimedia message, or MMS, with a malicious code in it. Your phone automatically receives the message and interprets it without your permission. Bam you’re infected. What happens after that depends on what the hacker tells the code to do.

The question is, why haven’t we gotten this very important security fix yet? We haven’t received it, because our carriers are dragging their feet. The way the updates for Android work is like this; Google releases the update to the carriers, then they put the update into their own code and then release it to the public. Verizon, Sprint, T-mobile and all the other service providers from great to small have gotten this fix from Google, but as of today, not one has released it.

You would think that the security of 950 million customers would be a top priority
to these companies, but apparently not.

Maybe after few thousand angry letters they might listen. In the mean time, there are two options: Root your phone or simply change a setting.

Rooting your phone isn’t exactly easy and it comes with a risk. You are basically replacing the operating system of your phone. If you mess it up, you can ruin your phone. It voids your warranty to even try it. It’s definitely not for the non-tech savvy or the faint of heart, so for now, changing the setting is probably your best answer. Here’s how (UPDATE: If your phone has received the update to fix Stagefright you don’t need this. Check HERE to see if your phone is on the update list or install the Stagefright Detector app mentioned below to make sure):

How to turn off auto-receive for MMS:
1) Open your text messaging app on your Android phone.
2) Go to settings and find auto-receive MMS.
3) Turn it off.
4) Hit back to return to the app.

Here’s a quick tutorial if you need it:
http://www.greenbot.com/article/2954235/android/how-to-protect-yourself-from-the-stagefright-security-flaw.html

You can also try this one:
https://www.twilio.com/blog/2015/07/how-to-protect-your-android-device-from-stagefright-exploit.html

There is a minor inconvenience with turning this off. That is you will have to click a button to receive any attachment (pic, etc.) from a text. It will stop auto-receiving these attachments thus foiling any attempt to insert any malicious code to your phone without your knowledge. It is still possible to get infected if you click on an infected attachment, so be careful who you open attachments from. If you don’t know who they are, don’t open it. It’s basically the same rule for unrecognized e-mail attachments. When in doubt, leave it out!

If you have any questions regarding this or any other computer issue feel free to contact me via the Contact Us page or by e-mail. Safe (mobile) computing!

UPDATE: If you want to know if your specific phone is vulnerable there is a Stagefright detection app by Zimperium INC. Just go to the Play Store on your phone and search for “Stagefright detector app” or click the below link for more info.

https://play.google.com/store/apps/details?id=com.zimperium.stagefrightdetector

Please note that the app DOES NOT fix Stagefright. Its only purpose is to tell you if you are vulnerable. The only way to fix it is by applying the update from your carrier when they release it. You can still greatly reduce your chances of infection by changing the MMS settings mentioned above. Cheers!

UPDATE 2: It looks like a few Android devices have been finally updated! Here’s a short list:

* T-Mobile Galaxy Note 4
* T-Mobile Galaxy S5
* AT&T Galaxy S6 & S6 Edge
* Verizon Note Edge and Note 4

If your device is on the list make sure you go to Settings>About device>Software update to get the update if you haven’t already.

UPDATE 3 : Here is a more up-to-date list of phones that have received the Stagefright fix so far:
http://www.androidcentral.com/list-devices-stagefright-patches

Upgrading Microsoft Office. Is Office 365 for you?
0
Howard DeAlvarado
Upgrading Microsoft Office. Is Office 365 for you?

Many people feel pressure from other sources to upgrade to the latest version of MS Office.  You may have just purchased a new computer for your home and your old version of Office is missing or may be too old to work on a new computer. With either scenario, you may be looking to buy Microsoft Office (Word, Excel, PowerPoint, etc.) you should know how the Office game has changed.

Microsoft Office 365 is subscription based. The good news is you can download it right away and it’s cheaper to start. You also get upgrades to newer versions when they come out. The bad news is you will pay more in the long run because you have to pay every year. When you stop paying, it stops working. Another problem is you can’t pick and choose which applications you want. In the past you were able to only install Word or Excel if that’s all you needed. Now you download the whole thing and install it. There is not an option to be found anywhere in the download process. Less choices means it’s easier, but it also means less freedom to choose and more room on your computer.

What are your options?

If you would rather not upgrade and were only upgrading because you can’t open newer files (ie. you have Word 2000 and you want to open a Word 2007 file), there is an easy remedy. Simply install the Office Compatibility Pack.

Other users can still open your files because Office is always backwards compatible (ie. Word 2010 can open Word 2007, 2003 or older files).

If you need a newer version because you are tired of your old one or if your new computer no longer supports your old version, you can still buy a non-subscription version (anything older than 2013) online. Unfortunately, you are not going to find these older versions at a local store or direct from Microsoft. Try Amazon.com or eBay. Just make sure it says “retail box” in the description and it includes the CD.

So who is Office 365 really for?

Businesses or individuals who are dedicated to MS Office and want to use the latest software. If you buy Office every time a new version comes out, the subscription service is definitely for you. If you are buying licenses for a lot of computers it’s also for you. In these cases the subscription service will save you money.

An option for those willing to try something new:

There is also a free version of Office. It’s called OpenOffice.org (it’s also the website). It’s supported by a community of programmers and will open most Microsoft Office documents.  If your needs are simple, I recommend you try it.  It could save you a lot of money in the long run.

Questions, comments, concerns or just need help? Contact me at service@gocomputerace.com.

Java Updates
0
Howard DeAlvarado
Java Updates

Today I would like to talk about the importance of Java updates.

What is Java?

Java is a programming language commonly used in webpages and certain applications that add advanced functionality. More on Java here: http://www.java.com/en/download/faq/whatis_java.xml

Why is updating Java important?

In a word; security. Any program that adds online functionality to a website can pose a security threat. Spyware programmers can deploy these functions in malicious ways to gain control over your computer, lock you out or gain access to valuable information.
A recent article released by CNET talks more about it:
http://news.cnet.com/8301-1009_3-57563951-83/homeland-security-still-advises-disabling-java-even-after-update/
I personally don’t advise disabling Java. It can cause problems in applications. I do however support the idea of keeping it up to date.

How do I update Java?

Java should check for updates every so often on it’s own. The key word there is “should”. Sometimes the update feature stops working for some reason or because people don’t know what Java is, they will simply ignore the notices to update.
If you want to update Java manually you can follow the steps in the instructions linked below:
http://www.java.com/en/download/help/java_update.xml
Scroll down to the “Java Update Options” section.

I also update Java whenever I do regular maintenance on a computer, a part of every service. So if you’ve had service recently, you’re good. Just keep updating it whenever it prompts you.

NOTE!! Sometimes Java will offer to install additional software along with the update. This is entirely up to you but it will be selected by default so keep an eye out for the option. You may not want what is being offered.