Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,809,019 Members 55,433 Now Online
XDA Developers Android and Mobile Development Forum

Upgrading from android 4.1.1 due to "heartbleed bug"

Tip us?
 
prw94
Old
#11  
Junior Member
Thanks Meter 0
Posts: 13
Join Date: Sep 2013
Quote:
Originally Posted by koolcat7 View Post
Im going to give it a go now, and flash Y14.
Let me know how it works for you, I need to go ahead and flash mine, as noted I'm concerned about HeartBleed but not over panicking based in my usage.
 
koolcat7
Old
(Last edited by koolcat7; 26th April 2014 at 06:38 AM.)
#12  
koolcat7's Avatar
Member - OP
Thanks Meter 2
Posts: 78
Join Date: Jun 2011
So do you think this version 4.1.2 will ever have that ssl bug enabled? Im flashed and already having issues, only 1x signal and profile wont update =/

Activate this device does nothing as well. Even in WiFi settings, ALL networks show full bars, when i know many are very far away. Looks like im going back to my nandroid backup and decide what to do when i find more info. ALSO, 4G LTE did connect, but kept going away every 10 seconds or so, back to 1x which is not normal.

Quote:
Originally Posted by prw94 View Post
Let me know how it works for you, I need to go ahead and flash mine, as noted I'm concerned about HeartBleed but not over panicking based in my usage.
 
prw94
Old
#13  
Junior Member
Thanks Meter 0
Posts: 13
Join Date: Sep 2013
Quote:
Originally Posted by koolcat7 View Post
So do you think this version 4.1.2 will ever have that ssl bug enabled? Im flashed and already having issues, only 1x signal and profile wont update =/

Activate this device does nothing as well. Even in WiFi settings, ALL networks show full bars, when i know many are very far away. Looks like im going back to my nandroid backup and decide what to do when i find more info. ALSO, 4G LTE did connect, but kept going away every 10 seconds or so, back to 1x which is not normal.
No, HeartBleed will not be enabled in anything save 4.1.1. You need to read up about the origin of this thing and the mechanism by how it is or isn't a threat.

Your only option is to go to a custom ROM that is not 4.1.1 based, or wait on HTC to issue the update for the stock ROM that they've promised, but have given no ETA for (and I wouldn't hold my breath).

I don't know if you have enough posts here to post on the development board ... that's another reason I've held off doing anything, although I'm getting close thanks to this thread ... but the developer of that ROM is very responsive to people with issues, and as I said the thing is very popular and seems pretty bulletproof from the response.

I promise I'm not his PR person, have never spoken to him, just found that ROM when I was looking for something that would be the least drastic change from what I'm running now, because of being flashed to Page Plus (which only gives me 3G, but I knew that going in). 4.3, you have to do more than just wipe and flash because of the partitions changes.
 
AarSyl
Old
#14  
AarSyl's Avatar
Senior Member
Thanks Meter 728
Posts: 1,808
Join Date: Aug 2012
Location: NJ
When I think about it, I don't see how changing the partitions on the phone will affect the functionality of the phone while using Page Plus. Maybe I'm looking at it incorrectly, but I don't reactivate my phone with Sprint every time that I flash a new rom, root it, change partitions, or anything at all. I could be wrong, though, for I have never flashed my phone to any other service.
 
prw94
Old
(Last edited by prw94; 26th April 2014 at 09:39 PM.)
#15  
Junior Member
Thanks Meter 0
Posts: 13
Join Date: Sep 2013
Quote:
Originally Posted by aarsyl View Post
When I think about it, I don't see how changing the partitions on the phone will affect the functionality of the phone while using Page Plus. Maybe I'm looking at it incorrectly, but I don't reactivate my phone with Sprint every time that I flash a new rom, root it, change partitions, or anything at all. I could be wrong, though, for I have never flashed my phone to any other service.
I really don't know, thus my hesitance in my own situation. Had a "recommend a ROM thread locked because I was unaware that wasn't kosher, so I went back to the boards (which can be a daunting experience for a noob) and found that particular ROM and I've also downloaded CM10 stable.

Am basically just acclimating myself to this stuff (phone was rooted, running MeanBean and flashed to PP when I bought it, have never done any of this), learning how to use Titanium and TWRP to make backups, etc.

I''d be lying if I said HeartBleed wasn't a concern to me, but I'm not as panicked as the OP about it. I know I need to probably change, although I'm quite happy as is with MeanBean. Biggest priority aside from security is not having to spend $50 or so to get the phone reflashed to PP.
 
Sinistertensai
Old
#16  
Sinistertensai's Avatar
Recognized Developer
Thanks Meter 6,323
Posts: 1,835
Join Date: Oct 2010
Location: Philadelphia

 
DONATE TO ME
4.1.1 has three digits the ones that matter are the first two. 4.1.2 may still be vulnerable to heart bleed. As for flashing to page plus you can do that on your own for free there are guides for how to do this all over. The best bet for every one running below 4.3 is to update to a Rom that is 4.3+ also with that update comes many fixes for the most common phone issue one might have while running below 4.3. There are 3 fully functioning roms currently available for the evo running on the updated partitions. Sense 5.5 by chubbz and I captain's stock Rom. And vins viper 4.0 with sense 5.5. Now with all this knowledge I've given you go explore, test the waters jump in. And always remember to post a question Rom related after at least 1 hour of thread searching Google and running the basics of Rom flashing. Wipe caches, dalvik if all else factory reset.

Sent from my EVO using Tapatalk
The Following 4 Users Say Thank You to Sinistertensai For This Useful Post: [ Click to Expand ]
 
prw94
Old
#17  
Junior Member
Thanks Meter 0
Posts: 13
Join Date: Sep 2013
Thanks for the advice. I have searched threads, as noted I have been practicing to test the waters ... I have a Titanium Backup of my apps and a Nandroid of current system with MeanBean on my SD card so I'm comfortable with that. I think I'm pretty clear on wiping the phone ... although I thought the factory reset took care of everything, do you still need to wipe caches/dalvik after that? Searching the threads is where I picked up on the 4.1.2 ROM which seems to be pretty bulletproof stable, and as far as I know HeartBleed isn't enabled in 4.1.2. I was basically looking at that as an intermediate step, again just to dip my foot in the pool of ROM flashing before attempting anything more elaborate. The instructions for going to 4.3 are a bit more complicated than wipe, flash, reboot, and I'd prefer to learn to swim a little better before jumping off the high board. Same with the Page Plus flashing. I'm sure I could eventually figure out how to do it myself, problem is I use my phone pretty much perpetually for work and can't afford to have it out of service for a millisecond, so it's worth the cost to me to get it done right first time, although I'd rather not break the flash in the first place. I've gotten some advice from folks who do such flashing that 4.3 will break it, every time.


Quote:
Originally Posted by Sinistertensai View Post
4.1.1 has three digits the ones that matter are the first two. 4.1.2 may still be vulnerable to heart bleed. As for flashing to page plus you can do that on your own for free there are guides for how to do this all over. The best bet for every one running below 4.3 is to update to a Rom that is 4.3+ also with that update comes many fixes for the most common phone issue one might have while running below 4.3. There are 3 fully functioning roms currently available for the evo running on the updated partitions. Sense 5.5 by chubbz and I captain's stock Rom. And vins viper 4.0 with sense 5.5. Now with all this knowledge I've given you go explore, test the waters jump in. And always remember to post a question Rom related after at least 1 hour of thread searching Google and running the basics of Rom flashing. Wipe caches, dalvik if all else factory reset.

Sent from my EVO using Tapatalk
 
koolcat7
Old
#18  
koolcat7's Avatar
Member - OP
Thanks Meter 2
Posts: 78
Join Date: Jun 2011
So, I talked to a friend of mine who knows alot about alot... and he assured me that you will only be susceptible to heartbleed attacks on open or public wifi spots. So this bug does not affect anything over 3G/4G, which puts most of my concerns at risk. So don't be too worried if you don't constantly connect to open wifi networks you cannot completely trust. In conclusion, im not too concerned anymore and am going to leave the android version alone.

Quote:
Originally Posted by prw94 View Post
Thanks for the advice. I have searched threads, as noted I have been practicing to test the waters ... I have a Titanium Backup of my apps and a Nandroid of current system with MeanBean on my SD card so I'm comfortable with that. I think I'm pretty clear on wiping the phone ... although I thought the factory reset took care of everything, do you still need to wipe caches/dalvik after that? Searching the threads is where I picked up on the 4.1.2 ROM which seems to be pretty bulletproof stable, and as far as I know HeartBleed isn't enabled in 4.1.2. I was basically looking at that as an intermediate step, again just to dip my foot in the pool of ROM flashing before attempting anything more elaborate. The instructions for going to 4.3 are a bit more complicated than wipe, flash, reboot, and I'd prefer to learn to swim a little better before jumping off the high board. Same with the Page Plus flashing. I'm sure I could eventually figure out how to do it myself, problem is I use my phone pretty much perpetually for work and can't afford to have it out of service for a millisecond, so it's worth the cost to me to get it done right first time, although I'd rather not break the flash in the first place. I've gotten some advice from folks who do such flashing that 4.3 will break it, every time.
 
prw94
Old
#19  
Junior Member
Thanks Meter 0
Posts: 13
Join Date: Sep 2013
Quote:
Originally Posted by koolcat7 View Post
So, I talked to a friend of mine who knows alot about alot... and he assured me that you will only be susceptible to heartbleed attacks on open or public wifi spots. So this bug does not affect anything over 3G/4G, which puts most of my concerns at risk. So don't be too worried if you don't constantly connect to open wifi networks you cannot completely trust. In conclusion, im not too concerned anymore and am going to leave the android version alone.
OK good luck, still going to update mine as soon as I make the final call on which one to try. Decisions, decisions ...

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes