News for hackers. Stuff that matters.
Re:Broadcom BCM43xx Wi-Fi chips allow remote attackers to ex... by IshKebab on Saturday July 15, 2017 @01:34PM (#14777833)
I hope someone will write a very visible worm that spreads via unpatched Android phones (approximately all of them) and finally forces Google to take updates seriously.

Can anyone see a reason this wouldn't work?

Re:Broadcom BCM43xx Wi-Fi chips allow remote attackers to ex... by johncolanduoni on Saturday July 15, 2017 @01:53PM (#14777938)
The fact tha Google is pretty timely with updates, and if this happened the manufacturers would be content with letting the malware push people towards earlier upgrades?
Re:Broadcom BCM43xx Wi-Fi chips allow remote attackers to ex... by cptskippy on Saturday July 15, 2017 @01:54PM (#14777944)
What do you hope such an attack would achieve? Giving Apple more market share?

Apple controls the iPhone soup to nuts and can update them as they see fit. They are the OEM and they do not allow Carriers to modify their devices.

Google provides an OS for free and stipulates that OEMs must make some concessions to get the GAPPs everyone wants for that OS. It has no where near the control over handsets or the ability to update them without cooperation from OEMs and Carriers who contracted with those OEMs.

With each new version of Android, Google is asking for more and more control over the system however they'll never own the devices or be able to exert their will the way Apple can.

Attacking field devices won't spur Google to ship magic updates to everyone's unsupported handsets because they couldn't even if they wanted to. It might spur them to make additional changes in future OS versions but the vast majority of handsets in the field would never receive those updates.

Re:Broadcom BCM43xx Wi-Fi chips allow remote attackers to ex... by IshKebab on Saturday July 15, 2017 @03:32PM (#14778475)
I'd hope that it pushes Google to rearchitect Android so that updates can actually be installed by the vast majority of people. Before saying "but that's impossible, it's down to the OEMs!" consider:

1. Windows runs on many many PCs and it is trivial to keep updated, so it is possible without OEM cooperation.

2. Google actually have finally started this work, which proves that they can solve, or at least improve the situation. But the fact that they didn't start working on it until now shows how low a priority it is for them. That is what needs to change, and I would hope an automatic Wi-Fi worm would do it.

Re:Broadcom BCM43xx Wi-Fi chips allow remote attackers to ex... by bitmapbrother on Saturday July 15, 2017 @04:20PM (#14778718)
You realize that Google doesn't distribute OS binaries to OEM's, correct? So why are you using Windows as an example? Each OEM downloads the Android OS source, adds their modifications and builds their own OS. How is Google supposed to modify or update an OS not built by them?
Re:Broadcom BCM43xx Wi-Fi chips allow remote attackers to ex... by bitmapbrother on Saturday July 15, 2017 @03:07PM (#14778341)
Fortunately, your dream will never come true. Remember Stagefright? Whatever happened to that? Oh, that's right nothing ever happened. There hasn't been one reported case of Stagefright in the wild according to Google's telemetry of over 2 Billion Android devices that use GMS.

Finding an exploit is one thing, making it work and bypassing all of the OS mitigations, on a platform that essentially has OEM's build their own OS, is an entirely different matter. It's why Stagefright never got anywhere and it's also why this will go the same way Stagefright did.