News for hackers. Stuff that matters.
Re:No One Cares About the Security of Unlocked Android Phones by djsumdog on Thursday November 17, 2016 @05:25AM (#12976138)
It's more complicated than that. If Google just produced a standard version of Android with a standard kernel version that all vendors would write for, refreshing and wiping phones would be as easy as Windows/Linux laptops. I wrote a post on this a while back:

http://penguindreams.org/blog/android-fragmentation/

Since then, I've become more and more frustrated with other ARM boards. Android fragmentation is directly related to ARM fragments and it's a huge mess. Things like device trees help, but ARM is missing the standardized architecture that Intel, Power, et. al. have.

Re:No One Cares About the Security of Unlocked Android Phones by kuschku on Thursday November 17, 2016 @08:13AM (#12977121)
> If Google just produced a standard version of Android with a standard kernel version that all vendors would write for

Then you wouldn't get all location data, call logs, and application usage data sent to China, you'd get them sent to the US, via Google, for better user experience and more targeted ads.

The result would be literally the same.

Re:No One Cares About the Security of Unlocked Android Phones by mordocai on Thursday November 17, 2016 @11:05AM (#12978610)
If you are in the US, at least your data isn't being sent to another country. Outside the US, I think your comment stands on its own.
Re:No One Cares About the Security of Unlocked Android Phones by kuschku on Thursday November 17, 2016 @11:38AM (#12978922)
Indeed I am outside the US, and I'm surprised the comment got that many downvotes.

EDIT: At the time, it was at -3

Re:No One Cares About the Security of Unlocked Android Phones by tmzt on Friday November 18, 2016 @08:59AM (#12986755)
One approach would be to define an ABI-like interface above the kernel layer which all Android userlands would adhere to. It would specify the functions for libraries like libhardware and libstagefright, as well as the GLES or Vulkan extensions needed to be supported. Google would takeover software updates against this certified base, with the OEM providing the base system for their hardware.
Re:No One Cares About the Security of Unlocked Android Phones by untoreh on Thursday November 17, 2016 @11:53AM (#12979077)
are you sure the problem is arm? How can google use a standard kernel version? I mean it is quite standard and only changes between major releases doesn't it? The thing is that linux being monolithic requires all the drivers baked in, which is fine like it is fine the whole flashing ROMs stuff, or maybe it was a few years a go when phones where phones and not pocket pcs so they benefited from the whole packaging. Magenta by google seems to use userspace drivers, so if that is ever gonna get used in phones it might be a solution for a more standard kernel
Re:No One Cares About the Security of Unlocked Android Phones by djsumdog on Thursday November 17, 2016 @05:58PM (#12982564)
Linux modules are very kernel specific. If you have modules compiled against the same kernel version, but with slightly differently flags, you won't be able to load it and will get a lot of invalid symbols.

There are thousands of kernel variants between every Linux distro. You always need to recompile drivers. nVidida and AMD/ATI get by this by providing binary blobs and a shim layer than can compile and link the two.

In the Windows/Mac world there is one version of the kernel officially maintained and distributed by their respective companies. They can keep the kernel consistent for a given release. That's what you have one set of drivers for Windows 7, one for 8 and one for 10, instead of a different set of drivers for each and every service pack.

Android could, at a minimum, standardize the kernel for every Android version. With that, binary drivers could work across devices.

Re:No One Cares About the Security of Unlocked Android Phones by vetinari on Friday November 18, 2016 @08:36AM (#12986609)
Yes, the problem is ARM.

How do you want to boot your kernel? There is no BIOS or UEFI or other standardized firmware, that would initialize at least one CPU, RAM, storage and load your kernel from there. Every ARM implementation boots in different way.

After you boot up, how do you enumerate devices that your kernel can use? There is no PCIE or other plug and play bus, that can enumerate attached devices. Your OS has to know what is available. Poke a wrong port and your board freezes. This is the reason, why Device Tree is a thing.

Linux kernel does not require all drivers baked in - kernel modules existed for decades already. Monolithic does not mean that everything is one big blob. NT is also monolithic, for example.

Re:No One Cares About the Security of Unlocked Android Phones by adrianratnapala on Thursday November 17, 2016 @03:13PM (#12981035)
I don't see what the monolithic kernel has to do with it. Kernel modules are dynamically have been loadable. Yes, they run in kernel mode, and yes their version tightly bound to the running kernel -- but how is that a problem for abstracting of varying hardware?