News for hackers. Stuff that matters.

A comment on There are over a billion outdated Android devices in use. Parent comment

Re:There are over a billion outdated Android devices in use by jsight on Monday November 13, 2017 @09:16PM (#15692086)
Security isn't as big of an issue with many of these devices as you might think. Unless it is years out of date, Play Services still gets updates, the system web view still gets updated, Chrome still gets updates, and in many cases the vendor will still roll out an emergency patch if there is something serious.
[ Parent | on HN ]
Re:There are over a billion outdated Android devices in use by acdha on Tuesday November 14, 2017 @08:58AM (#15694980)
That's a huge guessing game, though - remember StageFright? You could have a phone with an up to date Chrome, up to date Play Services, and still be trivially exploited simply by viewing a standard video file. (Not to mention wondering which of your apps uses an out of date embedded web view)

I would submit that the number of people qualified to safely make (and update) that risk assessment is extremely small, and all of them would recommend updating to a version which patches problems rather than hoping you can dance around them.

[ Parent | on HN ]
Re:There are over a billion outdated Android devices in use by jsight on Tuesday November 14, 2017 @09:27PM (#15701032)
StageFright was patched on a LOT of devices that "no longer received updates". The concern with embedded web views is overrated, as Android actually updates those via Play Services now.

For all of the talk of how awful this is, actual exploits are almost unheard of.

[ Parent | on HN ]
Re:There are over a billion outdated Android devices in use by tibu on Tuesday November 14, 2017 @03:51AM (#15693645)
- Bluetooth driver does not get an update - SSL is not updated - kernel is not updated
[ Parent | on HN ]
Re:There are over a billion outdated Android devices in use by Feniks on Tuesday November 14, 2017 @09:22AM (#15695170)
Whether or not security is important depends on what you do with your phone.

I don't use my phone for banking or payments and there are no compromising pictures or dangerous files on it. I don't have a pressing need for Android's latest security update.

[ Parent | on HN ]