Update [September 15, 2017]: As per a knowledgeable redditor, the BlueBorne Vulnerability Scanner app is giving a false alert to users because it bases its result by checking if the security patch level on device is September 1, 2017 or not. This is because Google released a patch for BlueBorne vulnerability with September security patch only. However, Samsung provided the patch on Android security patch level August 1, 2017 for the US variants of Note 8, and this is probably the reason why BlueBorne Vulnerability Scanner app is giving a false alert.
Update [September 15, 2017]: As per user reports, it seems the BlueBorne security vulnerability hasn’t been fixed yet, despite Verizon claiming that N950USQU1AQI5 firmware update includes BlueBorne security patch.
If you’ve updated your Note 8 to the N950USQU1AQI5 build, you can check for yourself if your device has been patched for the BlueBorne vulnerability using the BlueBorne Vulnerability Scanner app available on Play Store. This app is developed by the team which discovered BlueBorne vulnerability in the first place, so it gotta be right.
Update [September 15, 2017]: We just received official changelog from Verizon, and no it’s not similar to the update that international variant of Note 8 received yesterday.
BlueBorne security vulnerability lets a user control your device just by getting in range of your Bluetooth device. This enables the hacker to gain control over everything on your phone, even camera and microphone. Google included a patch for this vulnerability with September security patch for Android devices, but it seems Verizon has provided the patch for BlueBorne vulnerability without the September security patch.
The latest flagship device from Samsung, the Samsung Galaxy Note 8 is just a few days old. Moreover, in some places, it is yet to go on sale, however, Samsung has already pushed its first OTA update to Galaxy Note 8 in many countries including India.
Not only are the international variants receiving the first OTA update, even Verizon is pushing its first OTA update to the Galaxy Note 8. The OTA update for Galaxy Note 8 on Verizon arrives with build N950USQU1AQI5.
Check out: Galaxy Note 8 battery life: How to improve it
We don’t have an official changelog for Verizon’s update but it’s probably the same as the update which rolled out to international variants of Note 8 yesterday. The key highlights of yesterday’s update were improved stability of camera app, improved Wireless charging, and general performance improvements.
Check out: Best Galaxy Note 8 cases
However, the kernel version on Verizon’s update is 4.4.21. while the update for international variant had kernel version 4.4.13. Also, Kernel on Verizon’s update is dated Sep 8, while kernel on the international update is dated Sep 01.
Similar to the update that arrived on international variants, Verizon OTA update for Galaxy Note 8 also doesn’t bring September security patch, which basically means all the Galaxy Note 8 devices including international variants are still on August security patch.
In case you are haven’t received the update yet, go to Settings -About- Software update.
via XDA
Discussion