Bluebox OpenSSL Scanner
The Heartbleed vulnerability is a flaw in the OpenSSL library, used for secure communications.http://heartbleed.com/
Android devices ship with OpenSSL library by default. In addition, many apps will bundle their own copy of the library. The Bluebox Heartbleed Scanner from Bluebox Labs will check all of these copies and let you know if any appear to be vulnerable to the Heartbleed vulnerability.
For more information, please visit the Bluebox Labs writeup available at: https://bluebox.com/blog/technical/heartbleed-bug-impacts-mobile-devices/
Category : Tools
Reviews (30)
None of my apps are vulnerable and neither is my android. But I think by now this problems been fixed
My new phn's ok, thanks again (this app plus a few others r used 4 all my new phns)
Insufficient storage available.
Application starts and crashes immediately...
Good check for heartbeats
Does what it says on the tin
Does what it says on the box (I hope) with no permissions at all!
v1.0 - Not currently working in HTC Wildfire S, however it seems to work with Star N9599T. On the HTC it reports on apps far too quickly for it to have actually checked, then it checks OS version forever with no result. [Update] v1.1 - On Star checks OS fine (no heartbeat) but crashes during app check. As before with HTC. [Update] v1.2.1 on Star now reports 1 app with OpenSSL & the version. On HTC now seems to work perfectly :-) [update] v1.2.3 seems fine [update] v1.4 fine + Samsung J500FN is clean :-)
Love it!
Best Heartbleed scanner I've found. Most apps scan the Android system OR your apps - this one does both, which is vital. Other scanners found the apps on my device which were partially vulnerable(not fully as HEARTBEATS wasn't enabled), but missed the one on my device that was fully vulnerable. This guy found it.
It scans your OS and apps to see if any are vulnerable. It found that Netflix has Heartbeats enabled still, even though they already fixed their website they haven't fixed their app yet.
Does what it says. The comments about Facebook and or Netflix app showing up is that those apps use openssl but are not vulnerable.
Reported a problem app, which got updated within a day and now reports clean. The report just got a little bit more clear, and hence reassuring.
On my device only Cogs, Osmos HD and XCOM is vulnerable.
Bluebox still showing Fox News as lacking Heartbleed fix on our LG G2 units, which seems strange given the passage of time and that other Fox apps got Heartbleed fixes long ago. Tried CM and another scanner, and unsurprisingly they show Fox News as being okay. Paranoids might see this as an attempt to discourage watching Fox News, but more likely it suggests something may be amiss in Bluebox's Heartbleed scanning. Either that or other scanners are putting out false negatives.
A simple and easy way to test for a critical security problem.
This app will scan vulnerable apps too, not just your Android system.
This app tells me that facebook is infected with heartbleed, I installed 5 other apps to scan for heartbleed and facebook was okay for them.
Fast, lightweight, reliable and trustworthy app for your total peace of mind around what Heartbleed might have done to your smartphone running Android 4.1.1
Much better than Lookout's version. It scans your OS and Apps. We are probably way too paranoid about this thing with our Apps, but isn't it nice for peace of mind? And it doesn't sell you something.
Tells app infected like no other application. By far the better choice.
2 apps are openssl on my note3 HP Printer App & Samsung WatchOn. But told r safe.
Not only inform about device's os related vulnerability but also inform about installed apps..
I am being told same as others, that Facebook is vulnerable, but other scanners not saying anything about Facebook.
Thank you, everyone! Your dedication, voluntarily, is under appreciated. Thanks again.
it is much better than the Lookout app in that it also scans all installed apps, not just the core OS. Thx to it, I become aware that one of my apps, which is ironically a security app, is vulnerable !
Since OpenSSL vulnerabilities go beyond the HeartBleed set of vulnerabilities, would really like to see this scanner expand to cover all the OpenSSL vulnerabilities.
Does tell me which app are vulnerable with details and my SSL version
Nice work on the app scanning module, particularly after most recent update.
In device appslist the app is named differently, as "Heartbleed Scanner". This makes it hard to locate amongst hundreds of installed apps and is overall bad development practice. Would be nice to see same name in device and in Play Store.