Moto X Pure KRACK fix


#1

Just a heads-up. I just got a notification on my phone that Motorola/Lenovo has released an update for the Moto X Pure that will bring it up to the October 2017 Google security updates and fix the KRACK exploit. I feared I would be waiting longer for that. FWIW, my Moto X Pure is on CDMA/Sprint.


#2

Hmm. The KRACK vulnerability fix is in the November security patch level.

From https://source.android.com/security/bulletin/2017-11-01 :

  • Security patches for the KRACK vulnerabilities are provided under the 2017-11-06 security patch level.

#3

Some manufacturer’s (Samsung is one I know) have rolled the fix into their October releases.


#4

Yep, but the release notes specifically mention a KRACK fix. I verified it with a KRACK-checking app.

Yes, both of those sentences sound weird.


#5

Looks like an extra : slipped into the url
https://source.android.com/security/bulletin/2017-11-01


#6

The forum software HTML’ized the : at the end.


#7

I also have had it pickup the count and add that to the link , which makes it ng as well


#8

Perhaps it was the count, because I was pretty sure I checked the link after I finished posting.


#9

A buddy just called to say his Moto X (2nd Gen) displays a message telling him he has a KRACK infection and needs to go to Motorola to download a fix. Has this fix already been applied to the legacy models?


#10

It hasn’t, and I’m guessing never will be (on any carrier version). And the message your friend is getting is likely one of those scam pop-ups unless its coming in an actual system update notification.


#11

I got some more info from him. He installed Norton AV on his phone. What he was seeing was a notification from Norton that his phone is vulnerable. I told him it was, but the chance of someone accessing his WiFi data stream at home (he lives in the country) is minimal since the hacker would have to be parked outside his home.


#12

That makes more sense and that phone will likely be vulnerable forever. (I’d bet on it).


#13

we had this conversation about this on legacy phones already