yashsingh1/xdaforums huggingface dataset:
[Moto G5 Plus Questions & Answers] acejavelin:
Blueborne, like most of these insanely over-hyped vulnerabilities, is less dangerous than they want you to believe... In order for it to work you must be actively paired and communicating with a another BT device... For example, in order to "take over your Android device" like they show in their video, your phone must be paired to a BT Mouse (and they can't see the screen, so they need to know "where" the mouse is located, tougher than it looks), to view the files it must be paired for networking/file sharing, to access the camera directly it must be paired to as a camera, to access the media/audio it must be paired to a headset/headphones, etc. And I mean actively paired, just having BT turned on isn't enough like they make it sound, the known exploits rely on simple BT MAC address spoofing of trusted devices, so if you are not actively paired to a device, it doesn't work. The most common exploit would be hijacking the audio to your car or headset. which honestly hackers care very little about. This vulnerability doesn't have the wide-sweeping exploit capability that Armis wants everyone to believe it has. I put this in the same category as the other vulnerabilities that threatened millions and millions of handsets over the last couple of years, in the fear mongering category because the real world exploits of those vulnerabilities are much tougher than they make them out to be.

I worry about this one about as much as I did Quad-rooter, Certigate, Stagefright, or TowelRoot... in other words, I will continue with business as usual because unless you are a celebrity, politician, or other high-profile person a hacker would deem worth the amount of effort involved, there is nothing to really worry about.

Still, I hope Moto patches it soon, the September security patch fixes the vulnerability, but knowing Moto I don't expect to see it for a few months.
[Moto G5 Plus Questions & Answers] dzr:
Thanks... My major usage is a smart watch, and that has access to quite a bit of my phone. So, wouldn't that allow the attacker to have the same access?
[Moto G5 Plus Questions & Answers] acejavelin:
Yes, potentially... but after reading some of the technical documentation, which in many ways is as obscure and over-hyped as the press releases, it looks like it takes a lot for someone to do this. So the question is, are you really a potential target? Probably not. Because this isn't something a person would just sit in the mall and try to hijack devices on the fly, it takes some work.

Remember that the videos Armis shows are in a lab environment where they can setup these tests to make sure they work and fill you with terror. Remember what this company is... a IoT Security company, their business is to sell a product that would detect/prevent things like this. Funny how they would fan the flames of a such a thing, that has supposedly been around forever and since the beginning of Bluetooth technology, but no one has ever figured before? Hmmm.... seems pretty convenient.

I am not going to tell what to do, but I am not going to stop using my smartwatch, headset, or ODB dongle because of this, and probably won't be shutting my BT off ever, just like I always have done.
[Moto G5 Plus Questions & Answers] topshot:
Why does Armis say, "The attack does not require the targeted device to be paired to the attacker’s device, or even to be set on discoverable mode." then?
[Moto G5 Plus Questions & Answers] acejavelin:
Yeah, I was incorrect... I reviewed some of this information in more depth over the weekend to make a recommendation to our IT Security committee and it is much more exploitable than I initially thought.

Honestly, unless I am actively using it I am keeping my Bluetooth off until this is patched, even though the likelihood of this exploit actually being used is extremely low due to range (attacker must be within about 30' or about 10m, depending on environment, for a sufficient length of time to do anything) . The most common places I am where I use Bluetooth, like work, in the car, or home, have an incredibly low chance of something of occurring, but out in public such as walking through the mall, airport, coffee shop, on a bus or subway, etc. there is a realistic chance of this vulnerability being exploited, but in all honestly it is still a pretty remote chance.

At this time we are not recommending removal of all company information from Bluetooth capable mobile devices, but are issuing a warning and recommended best practice of disabling Bluetooth except when it is actively in use. At this time we are just monitoring the situation.

Our organization uses a partial BYOD system (laptops are issued but company, phones/tablets are a mix), with simple Exchange policy device management (meaning it's easy to bypass the policy, which we know occurs to some extent), so devices are all over the place and include Android, Apple, and Windows mobile devices, plus we have laptops and BT capable desktops with Windows 7, 10, Linux, and Macs. We are still investigating options and monitoring how this vulnerability is being exploited in the real world.

(Sorry, was an ongoing edit while I was in the meeting)
[Moto G5 Plus Questions & Answers] ckret:
the exploit is still overhyped though

the attacker uses an underflow to connect to the device but then it behave as a mouse and needs to have prerecorded movements to access data

this means that it also has to unlock your screen to have access to your data and this means that a simple lockscreen pin limits the attacker from accessing your data

(all can be read on the blueborne site)

so the likelihood of being attacked and have data stolen or modified is really really really low.
[Moto G5 Plus Questions & Answers] Niii4:
Found this, can it really block Blueborne?

https://play.google.com/store/apps/details?id=com.fruitmobile.android.bluetooth.firewall
[Moto G5 Plus Questions & Answers] acejavelin:
Not sure... Haven't found a way to actually get the exploit to work, so I don't know if this would work or not.

I can tell you that FruitMobile has been making Android apps, many Bluetooth focused, for almost 2 years... Not a fly-by-night dev.

Really doubting this is near as bad as Armis wants us to believe, couldn't get over a dozen devices to even be seen in the exploit software, let alone do something.
[Moto G5 Plus Questions & Answers] dzr:
Funny, I emailed them 4 days ago, asking if they block Blueborne.. they added it 3 days later, but still no response to my email.

They make a big deal about reading their directions before turning it on. I wonder if there are down sides to doing so. I'm curious as to what the instructions say.

Hopefully, of they are reputable, as you say, if real exploits are created, they'll add it to the blocker.
[Moto G5 Plus Questions & Answers] Niii4:
I entirely agree, I think Armis is over-hyping this exploit. They may have an ulterior motive. I won't install their vulnerability check app.

But I'm curious, if a BT firewall app could help or make no difference.

---------- Post added 20-09-2017 at 12:01 AM ---------- Previous post was 19-09-2017 at 11:57 PM ----------

@dzr are you gonna test the firewall? If so, pls keep us in the loop.
[Moto G5 Plus Questions & Answers] dzr:
I installed the trial.

The Blueborne detection works by disconnecting any device which is not in your whitelist.

For example, until I added my smart watch as a trusted device, it showed device connected and then connection forcefully terminated in under a second. The log doesn't show milliseconds.

So the two questions I immediately came up with are:

A) Will a device coming in through Blueborne connect like a normal BT device and be blocked by this?

B) Will a connection lasting milliseconds be enough to infect a device?
[Moto G5 Plus Questions & Answers] dzr:
In general, the app sends a notification, whenever a BT tries to connect. It also has a scan to show you which apps have access to which BT functions.

BTW, I believe the earlier article said the exploit takes about 10 seconds.
[Moto G5 Plus Questions & Answers] Veronezzi:
Completely wrong. The Bluetooth only need to be on and the attack is possible. It can be done without any previous pairing.

If you buy a new G5+, take it out of its box, turn the device on for the very first time and turn on the bluetooth you are 100% vulnerable to attacks.
[Moto G5 Plus Questions & Answers] acejavelin:
Yeah, I know I was wrong... Just never came back to this thread to discuss it.

Still isn't as bad as they make it out to be.
[Moto G5 Plus Questions & Answers] Veronezzi:
That isn't the best practice because the attack could happen. The only acceptable practice is keeping your Bluetooth off till a patch fixes it, or to move to somewhere that is impossible to another human being be less than 10 meters from you... Like Antarctic...
[Moto G5 Plus Questions & Answers] acejavelin:
In this case, we made a recommendation to our users... perhaps using the term "best practice" is not correct.

Again, in all of our testing we were unable to exploit the vulnerability in multiple devices.
[Moto G5 Plus Questions & Answers] Niii4:
"The Blueborne detection works by disconnecting any device which is not in your whitelist.

A) Will a device coming in through Blueborne connect like a normal BT device and be blocked by this?"

Thanks for testing and sharing this intel.

It sounds like a good firewall but the question, indeed, remains does a Blueborne attack will be recognized like an unauthorized BT device or not?

FruitMobile clearly advertises its firewall as Blueborne blocker.. so, truth or dare?

Moreover, it seems that no one so far managed to copy said exploit successfully, which begs the question, is Armis exaggerating the whole thing for marketing purposes?

Do I feel vulnerable? Absolutely not. Why, for there is not much this BT exploit could do without me noticing. All my front cams are taped. I use BT chiefly for keyboard input.
[Moto G5 Plus Questions & Answers] Karlinski:
The September Security update fixes this... case closed
[Moto G5 Plus Questions & Answers] Niii4:
Not on all models [hardware SKU]! Thus the case is still wide open.
[Moto G5 Plus Questions & Answers] Niii4:
What about Bluetooth HCI snoop log? Shouldn't the log show suspicious activities?
[Moto G5 Plus Questions & Answers] acejavelin:
What update? Haven't seen one... Just saying
[Moto G5 Plus Questions & Answers] topshot:
What about the 90+% of phones no longer getting any updates?
[Moto G5 Plus Questions & Answers] Karlinski:
The September 5 security update. Nothing from Moto, but most of the custom ROMs for the g5+ have it now...

I agree that many phones will never get the fix, and that is an issue we live with everyday, as well as issues like this in other instances (my car has a known problem, but the dealer will never fix it, something I live with). Users of any phone which has supported custom ROMs will get the fix though..

That said, this thread is for Moto g5+ devices, which have an update to fix this... Other phones belong in their own section...
[Moto G5 Plus Questions & Answers] Niii4:
This is highly misleading.
[Moto G5 Plus Questions & Answers] itslels:
This is where living in a smaller hick town comes in handy. Probably well over half the people here hardly even know what Bluetooth really is, little alone anything about a blueborne exploit.

I ain't sweating it.
[Shield Tablet Q&A, Help & Troubleshooting] tyiphius:
Ill start from the beginning and try to include as much information as possible. I have a LTE shield, screen was cracked. Found a wifi model and bought it from someone. When I met up with him, it was on the setup screen, I hit a few things to make sure the screen was working. I swap out the motherboards and some other small stuff. With my LTE motherboard in the non-cracked screen now, I go to tap icon and seems only the top half of the screen works. Used my controller to get to the touch calibration, that failed. Don't know why, but I figured I'd just just restore to stock and see what happens. I got the firmware from the nvidia download center and tried to flash the firmware via fastboot and got "remote: insufficient memory". Tried a bunch of suggestions people had on other threads/forums, but nothings worked so far. I figured I'd try to install a custom recovery and try a custom rom or look for a flashable stock rom, TWRP installs successfully but doesn't boot. After many failed attempts I tried CWM and it booted! Tried flashing a custom rom put on a SD card but everything time I select to install from sdcard or sdcard1 it says it cant mount, same thing when I go into advanced options and try to mount. Cant mount as a USB and, and theres nowhere where I sideload to since nothing will mount. I'm open to suggestions.

Thanks in advance!
[Member-Found Deals] cRaZyzMaN:
8gb/128gb - black

https://goo.gl/z42CTR

coupon - ONE5CJ

€441.86

6GB/64GB - black

https://goo.gl/MkVZZu

coupon - TPONBJ

374.33€

:D
[Member-Found Deals] GDane1:
Is this still available?
[Windows 10 Mobile] saq333:
Hi I'm using the HP Elite x3 how can I roll the phone back to a build before creators update, and leave it there? I.e. Stop updates.

Thanks
[Windows 10 Mobile] marianodelfino:
Flash another w10m version, or use WDRT to get the version your device came by factory(should be 14393 or so) and then disable the service wuauserv(windows updates).

14393.1066 and CU are the best builds in my opinion... If you are having problems with CU, just make a hard reset which will allow you to delete some sysapps at start(to do this enter the store and quicly disable automatic app updates, if you don't disable it, it will update some apps that will block the privilege to uninstall them i.e. outlook) or use interop tools to delete what you don't want. Making the hard reset will leave your device with a fresh CU.
[Windows 10 Mobile] saq333:
Hi [MENTION=6639742]xxJMarian[/MENTION] thanks for the tip, this worked . I used WDRT and got back to the build I want, 10.0.14393.953, this was before CU which took away app corner and social integration. Now I have the build I want and DO NOT want CU.

My phone is on airplane mode until I figure out how to prevent it from updating again:

1. I went into the store and turned off auto updates of apps

2. there is no "phone update" option in background tasks for this build...

what should I do next? I would be happy with the x3 for another year if it doesn't update; willing to miss out on patches and security maintenance.
[Windows 10 Mobile] marianodelfino:
Get interop tools, do all the proper unlocking and disable the service wuausrv using the registry to stop updates. This will also affect the store, since it uses the windows update service aswell. Once you disable the service it won't search for system updates nor apps. What you can try to do is setting it to manual instead of disabling it so it only triggers when you search for updates instead of automatic. The service registry location is HLKM -> SYSTEM -> CurrentControlSet -> Services
[Samsung Galaxy Note 8 Questions and Answers] chris7021:
Just want to share this info with you guys and to save you time:

I got my Brand new Galaxy Note 8 last night and when I inserted my Straight Talk Simcard I only can text and make/receive phone calls. The mobile Data won't work at all and it won't allow me to edit the APN settings. APN setting was totally grayed out and you cannot "ADD", "Reset to defaults", and or edit the current APN. It keeps saying "Unable to view access point name. Access is restricted to current user profile" I tried to use different Sim cards to check if the default Verizon APN settings return to default but no luck either. My last option was just reset the phone to "Factory Settings".......No luck either! First strike! :(

Contacted Samsung about it and a tech did a remote section (he didn't know wth was APN settings) and couldn't figure it out of why my APN settings were gone. His Answer was "You need to contact your service provider for that issue". Failed! Second Strike! :confused:

I contacted Straight Talk about the incident and no solution yet, the lady that "help me" earlier have no clue about it and her answers weren't professional as she keeps telling me "Ohh your old Sim card won't work on your new NOTE 8 because is coming from an old phone (Galaxy S8 Plus), and you need to buy a brand new Sim Card Kit to have the MOBILE DATA working again."[/COLOR] I laughed on my inside and took a deep breath and told her "Sweety I don't need to buy a new Sim Card kit to have my MOBILE DATA back, I been a SAMSUNG/STRAIGHT TALK customer for many years and I swap phones the whole year (GEEK). Also, I always use the same APN settings in every SAMSUNG phone that I owned before without buying a new Sim Card. Buying a brand new Sim Card won't fix the grayed out APN Settings on the phone!!!"

STRIKEOUT :mad:

I FIX IT MYSELF AND ALSO THANKS TO XDA DEVELOPERS! :D Walk Off Hit!

The Solution for this issue is to reset your Phone back to Factory settings using the ODIN method and of course using the VERIZON stock firmware version N950USQU1AQH7

Here's the link to the stock VERIZON firmware:

If you do everything the right way, the APN settings will go back to normal.

GOOD LUCK! :D
[Samsung Galaxy Note 8 Questions and Answers] chris7021:
https://www.androidfilehost.com/?fid=889764386195928372
[Samsung Galaxy Note 8 Questions and Answers] chris7021:
[IMG="8"]http://i64.tinypic.com/2vmiz41.jpg[/IMG]

Note: Don't mind the 3G since at my house I get a weak signal. Other than that, is always 4G LTE.
[Samsung Galaxy Note 8 Questions and Answers] Bone777:
I have the same scenario with my Note 8 from the Philippines locked under Globe Telecoms.

i was able to use my Smart Telecom sim via third party unlock but no data, call and text only.

i tried flashing everything using Globe's stock firmware from sammobile but no luck.

'sammobile.com/firmwares/galaxy-note8/SM-N950F/GLB'

Am i missing something?

flashed BL AP CP and CSC (home csc) all at the same time.

saw somewhere i should flash home csc first then flash the rest after. is this what you did?

i see from the sammobile site a couple other firmwares from the philippines

Philippines (Open Line) (XTC)

Philippines (Smart) (SMA)

should i flash using the Open Line one?

thanks in advance!

UPDATE:

Flashed with XTC Open LIne. no good still no data.

Still waiting for help on this one. thanks
[Samsung Galaxy Note 8 Questions and Answers] mykelabra:
Same scenario

Have you found a fix to this problem sir?

I just unlocked my note 8 via third party as well. This unit is a globe one. I tested it on a smart sim but apn cannot be edited.

I am worried that I cannot use this phone when i go to another country. Hence, I need to find a solution asap.
[Samsung Galaxy Note 8 Questions and Answers] luisenzo18:
To #bone777

Did you solve your issue? Same problem here.
[Samsung Galaxy Note 8 Questions and Answers] cgrimm9:
try shortcut Master lIte ON play store. open app O N top right corner click on the 3 dot. all apps Search for com.Test.LTEFunctionality

open LTEFunctionalitytest

Launch Look 4 LTEAPN settings

and see if you can add Apm From there
[Samsung Galaxy Note 8 Questions and Answers] luisenzo18:
@cgrimm9

I already tried that one two,in that option, i'm in apn settings section and the ADD selection is blue but nothing happen when i click it. And the same message i got. "Unabkle to view access point etc."
[Samsung Galaxy Note 8 Questions and Answers] cgrimm9:
I have the unlocked model and not ran into this issue I just read thatt others have had and pointed out to sh ortcut master lite that's why I brought it up
[Samsung Galaxy Note 8 Questions and Answers] kupuku:
Enter the bootloadter by turning off your phone then hold the Bixby button, volume up and power.

You'll see a blue screen woth some graphics, give it some time to get to the all text bootloader screen.

Use the volume down button to go to "wipe cache partition", press power to select.

Once complete, press power again to reboot system (reboot your phone).
[Samsung Galaxy Note 8 Questions and Answers] Spa22ow:
Just want to know what 3rd party unlocking company did you use to unlock your nite 8 from globe? Tried 3 already online and no codes. Thanks for the reply.
[Samsung Galaxy Note 8 Questions and Answers] genica:
(Cgrimn9) "try shortcut Master lIte ON play store. open app O N top right corner click on the 3 dot. all apps Search for com.Test.LTEFunctionality"

But press "Save APN by AT COMMAND Enable" and then "Lte Apn Settings"
[Samsung Galaxy Note 8 Questions and Answers] Mrpoitevint7:
how to install stock firmware

how do I install stock firmware
[Samsung Galaxy Note 8 Questions and Answers] batobalani86:
,, Sir were you able to fix? I have this same issue. Please email me batobalani86@gmail.com if you found solution po. Thanks
[Samsung Galaxy Note 8 Questions and Answers] Digital_kulangot:
Quote:

Originally Posted by Bone777

I have the same scenario with my Note 8 from the Philippines locked under Globe Telecoms.

i was able to use my Smart Telecom sim via third party unlock but no data, call and text only.

i tried flashing everything using Globe's stock firmware from sammobile but no luck.

'sammobile.com/firmwares/galaxy-note8/SM-N950F/GLB'

Am i missing something?

flashed BL AP CP and CSC (home csc) all at the same time.

saw somewhere i should flash home csc first then flash the rest after. is this what you did?

i see from the sammobile site a couple other firmwares from the philippines

Philippines (Open Line) (XTC)

Philippines (Smart) (SMA)

should i flash using the Open Line one?

thanks in advance!

UPDATE:

Flashed with XTC Open LIne. no good still no data.

Still waiting for help on this one. thanks

Any updates if you were able to solve this problem sir?thanks
[Samsung Galaxy Note 8 Questions and Answers] messanger4u:
Same issue here also Globe operator , S8 unlocked via codes , but no data ??? any solution
[Samsung Galaxy S8+ Questions & Answers] Elfmirth:
I was thinking, is it possible to mod the AOD to be like the ICE View screen on the HTC 10? I came from that phone and has loved that clock you get with ice view, and thought that would look stunning as an AOD for the S8.

Im not rooted but thought if it is possible to change my AOD to that it would be reason for me to root the s8 :)

so is there any dev that could do this? :)
[Samsung Galaxy S8+ Questions & Answers] prodigyX:
+1

I would root my phone just for the ability to remove the persistent battery percentage on the AOD :eek:
[Samsung Galaxy S8+ Questions & Answers] crayonyes:
this one already possible

https://xdaforums.com/galaxy-s8+/themes/mods-small-collection-tweaks-t3657119
[Samsung Galaxy S8+ Questions & Answers] ChanceGPM:
Why would you want to do that? I think it's a really nice feature being able to see battery percentage without touching the device or unlocking it
[Samsung Galaxy S8+ Questions & Answers] prodigyX:
Because I, like a lot of other people, find myself obsessing over the battery if I constantly see the percentage. I'd rather get a general idea from the icon instead, knowing that the battery life is good anyway. I do realize I'm probably in the minority, but I'm not alone!
[Samsung Galaxy S8+ Questions & Answers] ChanceGPM:
Oh that's an interesting point if view, I understand :) I know the feeling xD
[Xiaomi Mi Note 2  Questions & Answers] Dvalin21:
So does it matter if I grab any Mi Note 2 and just install the global rom? Meaning that I grab the local and install the Global rom that it will work in the US on LTE? Thanks.
[Xiaomi Mi Note 2  Questions & Answers] StoneTrapper:
It's a confusing way they've named things but no.

Global rom and global edition are very different things.

The Global rom will run on all editions of the phone and includes Google apps.

The Global edition will run either Global or CN rom and has many more bands available for use.

Changing the ROM will not change the bands that the phone is capable of.
[Xiaomi Mi Note 2  Questions & Answers] slyscorpion:
It's a hardware issue, not software.
[Xiaomi Mi Note 2  Questions & Answers] Dvalin21:
Just wanted to be sure. I know that there are ways to open up LTE Bands on Snapdragon CPU, but don't know how easy or hard of is