- #Life of pi movie free download for mobile update#
- #Life of pi movie free download for mobile android#
PI worked with our partners at The Centre for Intellectual Property and Information Technology Law ( CIPIT) at Strathmore Law School in Nairobi, Kenya and found rooting the Y2 complex and difficult. Rooting the device, in of itself, potentially opens the device up to further compromise, possibly breaks warranty coverage, and may prohibit access to certain networks and apps. This requires a person to disable security apparatus put in place to protect the user. The device firstly needs to be rooted, which is a process that allows a person to gain administrative access to the device. This means that even though a person would be buying the phone brand new, its operating system could be over 7 years out of date, and incredibly insecure.įurther, because of how it is designed, the phone’s operating system is difficult to update.
#Life of pi movie free download for mobile android#
And we have found it and similar devices by TECNO using Android 4.4 available online in 2021.
PI have found examples of the TECNO Y2 phone being sold in stores with this extremely outdated operating system as recently as 2020. At the time TECNO stopped manufacturing the phone, it had been in production – with an increasingly outdated operating system – for four years. The Y2 was discontinued by TECNO in November 2019 – which was after PI bought our Y2 and a year before our partners bought theirs. This means a specially crafted video (generally) can be sent to the device via any method (Bluetooth, WhatsApp, HTTP Download), and be used to gain complete access to the device. An indexing service keeps an index of the files on a device and allows them to be searched. There are also numerous further vulnerabilities relating to mediaserver, which is Android’s internal indexing service for videos and images.
The user doesn’t even have to open the message to have their device compromised. An attacker needs only send a specially crafted multimedia messages (like a picture) to fully compromise the device. The vulnerability affects how Android processes multimedia messages over the Short Messaging Service (MMS over SMS). The most prevalent of these vulnerabilities is related to Stagefright, which is a 2015 critical vulnerability. And they aren’t going to get fixed - Android has stopped releasing security updates for 4.4.2. They are left vulnerable to hackers, spam, and other bad actors. This means that phones that use this out-dated version of Android are easy to exploit.
Nineteen of these vulnerabilities are scored the maximum 10 on the Common Vulnerabilities and Exposures framework. This version of Android currently has over 200 vulnerabilities.
#Life of pi movie free download for mobile update#
When PI and our partners purchased this phone in 20 respectively, the 4.4.2 version of Android had not received a security update in over four years. The phone comes with Android 4.4.2 - a system that was released in December 2013.Īt the time of release of the TECNO Y2, Android 5 and 6 were the only versions of Android receiving regularised security updates. The core issue with the TECNO Y2 is its operating system. Concerningly, the TECNO Y2 we looked at was certified by Google, but more on that later. In 2019 Privacy International (PI) bought a TECNO Y2 in Uganda for testing and discovered serious concerns with the phone’s operating system and pre-installed apps. They are subsidiary of Transsion Holdings - who made $5.7bn in revenue in 2020 and also sell phones under the Itel and Infinix brands. Įnter TECNO - a phone manufacturer who has a 47% market share in East Africa. This piece is another instalment of our research in this area. In 2019 we showed how the MyPhone Mya 2 was filled with pre-installed apps that put users at risk and couldn’t be uninstalled. Privacy International has been researching and raising the alarm about manufacturers of low-cost phones which can leave users exposed and at risk.
0 kommentar(er)
