Re:Exploring Previously Unknown Remote Kernel Bugs Affecting...
by wahern on Monday November 06, 2017 @07:51PM
(#15640280)
An interesting exercise would be to compile notification dates with code commit dates, and then compare the average difference (notification date - commit date) among groups.
If there's a discrepancy, then that's possible evidence one group might be hoarding bugs, or at least waiting for notification approval from, e.g., a domestic intelligence agency.
Being China, its also possible that the Chinese government indirectly or directly sponsors this research, since Android is by far the most common smartphone OS there.
edit: C0RE Team [1], who also has many contributions seems to be an independent research company, who may be doing it just for the bounties.
[0] https://source.android.com/security/overview/acknowledgement...
[1] http://c0reteam.org/about.html