Comment by thaumasiotes | Hacker News Reader

Comment by thaumasiotes | Hacker News Reader

> Project Zero’s advice for those impacted follows:

>> Until security updates are available, users who wish to protect themselves from the baseband remote code execution vulnerabilities in Samsung’s Exynos chipsets can turn off Wi-Fi calling and Voice-over-LTE (VoLTE) in their device settings. Turning off these settings will remove the exploitation risk of these vulnerabilities.

> Google Pixel devices received software updates in 2021 that automatically enabled VoLTE and removed the toggle.

That's some great advice.

If you turn off VoLTE and Wi-Fi calling, I don't think you can get calls in the US, so I'm not suprised VoLTE can't be disabled.

Isn't LTE part of 4G? What about 5G?

I don't know about you, but I'd way rather not be able to get calls until Monday than be vulnerable to this exploit.

That's probably the right choice, if there's a firmware update on Monday. If not, it's probably time to buy a new phone.

If you are currently, you probably have been vulnerable to this and many other undisclosed vulns for years, 3 days isn't going to move the needle much in terms of risk, but indeed it is a step to take.

Doesn't everyone knowing the vulnerability exists now move the needle significantly?

even in Androids phone diagnostics?

    *#*#4636#*#*

Reply on news.ycombinator.com