>http://tinyurl.com/ofv74qu
>
>A billion Android phones are vulnerable to new Stagefright bugs...

2.0 seems to require user intervention - visiting an infected web site, playing a malicious MP3/MP4 etc.

That's really no different from PCs. Adobe Flash has been so buggy for so long that anyone still using it is risking their machine. Java is basically the same. I'm sure bad guys and government actors have zero-days for those two platforms and probably many others.

Stagefright 1.0 was especially dangerous: http://arstechnica.com/security/2015/07/950-million-android-phones-can-be-hijacked-by-malicious-text-messages/

"All an attacker needs is the phone number of the vulnerable Android phone. From there, the malicious message will surreptitiously execute malicious code on the vulnerable device with no action required by the end user and no indication that anything is amiss."