On: Google: Turn off VoLTE, Wi-Fi calling: severe Exyn...

[thaumasiotes]

> Project Zero’s advice for those impacted follows:

>> Until security updates are available, users who wish to protect themselves from the baseband remote code execution vulnerabilities in Samsung’s Exynos chipsets can turn off Wi-Fi calling and Voice-over-LTE (VoLTE) in their device settings. Turning off these settings will remove the exploitation risk of these vulnerabilities.

> Google Pixel devices received software updates in 2021 that automatically enabled VoLTE and removed the toggle.

That's some great advice.

[toast0 → thaumasiotes]

If you turn off VoLTE and Wi-Fi calling, I don't think you can get calls in the US, so I'm not suprised VoLTE can't be disabled.

[josephcsible → toast0]

I don't know about you, but I'd way rather not be able to get calls until Monday than be vulnerable to this exploit.

[mcsniff → josephcsible]

If you are currently, you probably have been vulnerable to this and many other undisclosed vulns for years, 3 days isn't going to move the needle much in terms of risk, but indeed it is a step to take.

[josephcsible → mcsniff]

Doesn't everyone knowing the vulnerability exists now move the needle significantly?

[toast0 → josephcsible]

That's probably the right choice, if there's a firmware update on Monday. If not, it's probably time to buy a new phone.

[yaomtc → toast0]

Isn't LTE part of 4G? What about 5G?

[flas9sd → thaumasiotes]

even in Androids phone diagnostics?

    *#*#4636#*#*