Google Play Newsstand 3.3 Brings Material Design Makeover

In a clear break from the previous practice of delivering nearly weekly Google … more

App Review: Calculating Your Android Calculator Options

Sure, everyone has a default Calculator and its something that you dont think about … more

MultiROM Once Again Available for the Galaxy S4

Multiboot, or the ability to select betweenmultiple operating systems on a single device at … more

Build an Impractical But Awesome Lego Mindstorm Dock

The vast majority of what we cover here on the XDA-Developers News Portal relates to … more
Post Reply

Upgrading from android 4.1.1 due to "heartbleed bug"

26th April 2014, 04:34 AM   |  #11  
Junior Member
Thanks Meter: 0
 
13 posts
Join Date:Joined: Sep 2013
Quote:
Originally Posted by koolcat7

Im going to give it a go now, and flash Y14.

Let me know how it works for you, I need to go ahead and flash mine, as noted I'm concerned about HeartBleed but not over panicking based in my usage.
26th April 2014, 06:01 AM   |  #12  
koolcat7's Avatar
OP Member
Thanks Meter: 2
 
80 posts
Join Date:Joined: Jun 2011
So do you think this version 4.1.2 will ever have that ssl bug enabled? Im flashed and already having issues, only 1x signal and profile wont update =/

Activate this device does nothing as well. Even in WiFi settings, ALL networks show full bars, when i know many are very far away. Looks like im going back to my nandroid backup and decide what to do when i find more info. ALSO, 4G LTE did connect, but kept going away every 10 seconds or so, back to 1x which is not normal.

Quote:
Originally Posted by prw94

Let me know how it works for you, I need to go ahead and flash mine, as noted I'm concerned about HeartBleed but not over panicking based in my usage.

Last edited by koolcat7; 26th April 2014 at 06:38 AM.
26th April 2014, 02:56 PM   |  #13  
Junior Member
Thanks Meter: 0
 
13 posts
Join Date:Joined: Sep 2013
Quote:
Originally Posted by koolcat7

So do you think this version 4.1.2 will ever have that ssl bug enabled? Im flashed and already having issues, only 1x signal and profile wont update =/

Activate this device does nothing as well. Even in WiFi settings, ALL networks show full bars, when i know many are very far away. Looks like im going back to my nandroid backup and decide what to do when i find more info. ALSO, 4G LTE did connect, but kept going away every 10 seconds or so, back to 1x which is not normal.

No, HeartBleed will not be enabled in anything save 4.1.1. You need to read up about the origin of this thing and the mechanism by how it is or isn't a threat.

Your only option is to go to a custom ROM that is not 4.1.1 based, or wait on HTC to issue the update for the stock ROM that they've promised, but have given no ETA for (and I wouldn't hold my breath).

I don't know if you have enough posts here to post on the development board ... that's another reason I've held off doing anything, although I'm getting close thanks to this thread ... but the developer of that ROM is very responsive to people with issues, and as I said the thing is very popular and seems pretty bulletproof from the response.

I promise I'm not his PR person, have never spoken to him, just found that ROM when I was looking for something that would be the least drastic change from what I'm running now, because of being flashed to Page Plus (which only gives me 3G, but I knew that going in). 4.3, you have to do more than just wipe and flash because of the partitions changes.
26th April 2014, 04:30 PM   |  #14  
AarSyl's Avatar
Senior Member
Flag NJ
Thanks Meter: 730
 
1,813 posts
Join Date:Joined: Aug 2012
More
When I think about it, I don't see how changing the partitions on the phone will affect the functionality of the phone while using Page Plus. Maybe I'm looking at it incorrectly, but I don't reactivate my phone with Sprint every time that I flash a new rom, root it, change partitions, or anything at all. I could be wrong, though, for I have never flashed my phone to any other service.
26th April 2014, 05:06 PM   |  #15  
Junior Member
Thanks Meter: 0
 
13 posts
Join Date:Joined: Sep 2013
Quote:
Originally Posted by aarsyl

When I think about it, I don't see how changing the partitions on the phone will affect the functionality of the phone while using Page Plus. Maybe I'm looking at it incorrectly, but I don't reactivate my phone with Sprint every time that I flash a new rom, root it, change partitions, or anything at all. I could be wrong, though, for I have never flashed my phone to any other service.

I really don't know, thus my hesitance in my own situation. Had a "recommend a ROM thread locked because I was unaware that wasn't kosher, so I went back to the boards (which can be a daunting experience for a noob) and found that particular ROM and I've also downloaded CM10 stable.

Am basically just acclimating myself to this stuff (phone was rooted, running MeanBean and flashed to PP when I bought it, have never done any of this), learning how to use Titanium and TWRP to make backups, etc.

I''d be lying if I said HeartBleed wasn't a concern to me, but I'm not as panicked as the OP about it. I know I need to probably change, although I'm quite happy as is with MeanBean. Biggest priority aside from security is not having to spend $50 or so to get the phone reflashed to PP.
Last edited by prw94; 26th April 2014 at 09:39 PM.
29th April 2014, 07:58 AM   |  #16  
Sinistertensai's Avatar
Recognized Developer
Flag Philadelphia
Thanks Meter: 6,328
 
1,838 posts
Join Date:Joined: Oct 2010
Donate to Me
More
4.1.1 has three digits the ones that matter are the first two. 4.1.2 may still be vulnerable to heart bleed. As for flashing to page plus you can do that on your own for free there are guides for how to do this all over. The best bet for every one running below 4.3 is to update to a Rom that is 4.3+ also with that update comes many fixes for the most common phone issue one might have while running below 4.3. There are 3 fully functioning roms currently available for the evo running on the updated partitions. Sense 5.5 by chubbz and I captain's stock Rom. And vins viper 4.0 with sense 5.5. Now with all this knowledge I've given you go explore, test the waters jump in. And always remember to post a question Rom related after at least 1 hour of thread searching Google and running the basics of Rom flashing. Wipe caches, dalvik if all else factory reset.

Sent from my EVO using Tapatalk
The Following 4 Users Say Thank You to Sinistertensai For This Useful Post: [ View ]
29th April 2014, 01:59 PM   |  #17  
Junior Member
Thanks Meter: 0
 
13 posts
Join Date:Joined: Sep 2013
Thanks for the advice. I have searched threads, as noted I have been practicing to test the waters ... I have a Titanium Backup of my apps and a Nandroid of current system with MeanBean on my SD card so I'm comfortable with that. I think I'm pretty clear on wiping the phone ... although I thought the factory reset took care of everything, do you still need to wipe caches/dalvik after that? Searching the threads is where I picked up on the 4.1.2 ROM which seems to be pretty bulletproof stable, and as far as I know HeartBleed isn't enabled in 4.1.2. I was basically looking at that as an intermediate step, again just to dip my foot in the pool of ROM flashing before attempting anything more elaborate. The instructions for going to 4.3 are a bit more complicated than wipe, flash, reboot, and I'd prefer to learn to swim a little better before jumping off the high board. Same with the Page Plus flashing. I'm sure I could eventually figure out how to do it myself, problem is I use my phone pretty much perpetually for work and can't afford to have it out of service for a millisecond, so it's worth the cost to me to get it done right first time, although I'd rather not break the flash in the first place. I've gotten some advice from folks who do such flashing that 4.3 will break it, every time.


Quote:
Originally Posted by Sinistertensai

4.1.1 has three digits the ones that matter are the first two. 4.1.2 may still be vulnerable to heart bleed. As for flashing to page plus you can do that on your own for free there are guides for how to do this all over. The best bet for every one running below 4.3 is to update to a Rom that is 4.3+ also with that update comes many fixes for the most common phone issue one might have while running below 4.3. There are 3 fully functioning roms currently available for the evo running on the updated partitions. Sense 5.5 by chubbz and I captain's stock Rom. And vins viper 4.0 with sense 5.5. Now with all this knowledge I've given you go explore, test the waters jump in. And always remember to post a question Rom related after at least 1 hour of thread searching Google and running the basics of Rom flashing. Wipe caches, dalvik if all else factory reset.

Sent from my EVO using Tapatalk

30th April 2014, 02:27 AM   |  #18  
koolcat7's Avatar
OP Member
Thanks Meter: 2
 
80 posts
Join Date:Joined: Jun 2011
So, I talked to a friend of mine who knows alot about alot... and he assured me that you will only be susceptible to heartbleed attacks on open or public wifi spots. So this bug does not affect anything over 3G/4G, which puts most of my concerns at risk. So don't be too worried if you don't constantly connect to open wifi networks you cannot completely trust. In conclusion, im not too concerned anymore and am going to leave the android version alone.

Quote:
Originally Posted by prw94

Thanks for the advice. I have searched threads, as noted I have been practicing to test the waters ... I have a Titanium Backup of my apps and a Nandroid of current system with MeanBean on my SD card so I'm comfortable with that. I think I'm pretty clear on wiping the phone ... although I thought the factory reset took care of everything, do you still need to wipe caches/dalvik after that? Searching the threads is where I picked up on the 4.1.2 ROM which seems to be pretty bulletproof stable, and as far as I know HeartBleed isn't enabled in 4.1.2. I was basically looking at that as an intermediate step, again just to dip my foot in the pool of ROM flashing before attempting anything more elaborate. The instructions for going to 4.3 are a bit more complicated than wipe, flash, reboot, and I'd prefer to learn to swim a little better before jumping off the high board. Same with the Page Plus flashing. I'm sure I could eventually figure out how to do it myself, problem is I use my phone pretty much perpetually for work and can't afford to have it out of service for a millisecond, so it's worth the cost to me to get it done right first time, although I'd rather not break the flash in the first place. I've gotten some advice from folks who do such flashing that 4.3 will break it, every time.

30th April 2014, 04:11 AM   |  #19  
Junior Member
Thanks Meter: 0
 
13 posts
Join Date:Joined: Sep 2013
Quote:
Originally Posted by koolcat7

So, I talked to a friend of mine who knows alot about alot... and he assured me that you will only be susceptible to heartbleed attacks on open or public wifi spots. So this bug does not affect anything over 3G/4G, which puts most of my concerns at risk. So don't be too worried if you don't constantly connect to open wifi networks you cannot completely trust. In conclusion, im not too concerned anymore and am going to leave the android version alone.

OK good luck, still going to update mine as soon as I make the final call on which one to try. Decisions, decisions ...

Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes