News for hackers. Stuff that matters.

A comment on Android libstagefright still exploitable. Parent comment

Re:Android libstagefright still exploitable by ocdtrekkie on Thursday August 13, 2015 @02:28PM (#10056229)
The fact that Google created a huge maintenance burden for themselves shouldn't absolve them of responsibility to provide that maintenance.

Microsoft supports Windows versions for ten years, and I agree that's crazy for Android. However, three years I feel is a bare minimum expectation. Devices tend to remain on the market for about a year, and the standard phone contract is two years. So three years from a version release should cover the vast majority of users for the life of their device, should they choose not to take "system upgrades" which may slow their device or change it in an unwanted manner.

[ Parent | on HN ]
Re:Android libstagefright still exploitable by cwyers on Thursday August 13, 2015 @02:53PM (#10056390)
I agree that DEVICES should be covered for n years, where n is somewhere between 3 and 5 and we can quibble about the specifics later. I don't think that backporting fixes should be the way we gauge this if newer versions are available instead.
[ Parent | on HN ]
Re:Android libstagefright still exploitable by ocdtrekkie on Thursday August 13, 2015 @02:55PM (#10056398)
The problem is that newer and better are not synonymous. And most Android users have probably learned by now that their devices getting slower with each update, not faster.
[ Parent | on HN ]
Re:Android libstagefright still exploitable by eropple on Thursday August 13, 2015 @03:35PM (#10056657)
Mine are getting no slower and often feel snappier. 5.1 was a big improvement over 5.0 on my Z3C.
[ Parent | on HN ]