{"action":"created","issue":{"url":"https://api.github.com/repos/WhisperSystems/Signal-Android/issues/3817","labels_url":"https://api.github.com/repos/WhisperSystems/Signal-Android/issues/3817/labels{/name}","comments_url":"https://api.github.com/repos/WhisperSystems/Signal-Android/issues/3817/comments","events_url":"https://api.github.com/repos/WhisperSystems/Signal-Android/issues/3817/events","html_url":"https://github.com/WhisperSystems/Signal-Android/issues/3817","id":97527299,"number":3817,"title":"Stagefright Vulnerability: No way to disable auto-downloading of MMS","user":{"login":"acconrad","id":422184,"avatar_url":"https://avatars.githubusercontent.com/u/422184?v=3","gravatar_id":"","url":"https://api.github.com/users/acconrad","html_url":"https://github.com/acconrad","followers_url":"https://api.github.com/users/acconrad/followers","following_url":"https://api.github.com/users/acconrad/following{/other_user}","gists_url":"https://api.github.com/users/acconrad/gists{/gist_id}","starred_url":"https://api.github.com/users/acconrad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/acconrad/subscriptions","organizations_url":"https://api.github.com/users/acconrad/orgs","repos_url":"https://api.github.com/users/acconrad/repos","events_url":"https://api.github.com/users/acconrad/events{/privacy}","received_events_url":"https://api.github.com/users/acconrad/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-07-27T18:37:07Z","updated_at":"2015-11-09T05:48:44Z","closed_at":"2015-07-27T18:39:43Z","body":"[In light of the recent news of the Android flaw via the Stagefright hack](http://www.npr.org/sections/alltechconsidered/2015/07/27/426613020/major-flaw-in-android-phones-would-let-hackers-in-with-just-a-text), one immediate way to mitigate risk is to disable auto-downloading of MMS. However, there is no way in the app right now to disable auto-downloading."},"comment":{"url":"https://api.github.com/repos/WhisperSystems/Signal-Android/issues/comments/154942815","html_url":"https://github.com/WhisperSystems/Signal-Android/issues/3817#issuecomment-154942815","issue_url":"https://api.github.com/repos/WhisperSystems/Signal-Android/issues/3817","id":154942815,"user":{"login":"moxie0","id":512439,"avatar_url":"https://avatars.githubusercontent.com/u/512439?v=3","gravatar_id":"","url":"https://api.github.com/users/moxie0","html_url":"https://github.com/moxie0","followers_url":"https://api.github.com/users/moxie0/followers","following_url":"https://api.github.com/users/moxie0/following{/other_user}","gists_url":"https://api.github.com/users/moxie0/gists{/gist_id}","starred_url":"https://api.github.com/users/moxie0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moxie0/subscriptions","organizations_url":"https://api.github.com/users/moxie0/orgs","repos_url":"https://api.github.com/users/moxie0/repos","events_url":"https://api.github.com/users/moxie0/events{/privacy}","received_events_url":"https://api.github.com/users/moxie0/received_events","type":"User","site_admin":false},"created_at":"2015-11-09T05:48:44Z","updated_at":"2015-11-09T05:48:44Z","body":"> I see you where sceptical [sic] from the start.\r\n\r\nNo, I was asking for information from the start.  At that point, there was none.\r\n\r\n> Do you use the [media libary](https://source.android.com/devices/media/index.html) for displaying images? Especially how do you display the images you show when receiving MMS?\r\n\r\nIf you click on your own link, you'll see there's nothing about rendering images in there.\r\n\r\n> Has anyone tried the exploit with Signal?\r\n\r\nGo for it.  Nothing in Signal touches stagefright without user interaction."}}