News for hackers. Stuff that matters.

A comment on Why an unhackable mobile phone is a complete marketing myth. Parent comment

Re:Why an unhackable mobile phone is a complete marketing myth by fnkym0nky on Sunday October 09, 2016 @03:08PM (#12672811)
Android is notoriously broken among the AppSec community. For proof all you have to do is look at the last 90 days of Android bug reports[1]. The reason why your not hearing of exploits is because of the price war that currently exists for them. Zerodium recently raised the price for a Android RCE to $200,000, with iPhone RCEs at 1.5 million[2].

[1] https://source.android.com/security/bulletin/2016-10-01.html [2] https://www.zerodium.com/program.html

[ Parent | on HN ]
Re:Why an unhackable mobile phone is a complete marketing myth by pjmlp on Sunday October 09, 2016 @07:06PM (#12674057)
After watching the presentations about the state of the union in regards to kernel security in Android, I came to realize that I was wrong in bashing Google for their constrained NDK.

Actually, they should constrain it even more, given the poor state of kernel exploits and how the whole security updates doesn't happen across Android devices.

[ Parent | on HN ]