News for hackers. Stuff that matters.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @11:24AM (#20412242)
That’s the problem. Why should your carrier have any say so in updating your operating system? If I buy a computer from Best Buy, I don’t have to wait for them to push an update to Windows.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by ndesaulniers on Thursday July 11, 2019 @12:05PM (#20412636)
Good question. When a phone stops working, people want their money back. Guess where most people in most markets buy their phone from?

Further, who do you think customer's call for support?

Now you know why carriers are hesitant about frequently updating a product they've already made a sale on. If an update breaks something, guess who pays the price?

Not defending them, and it's not the only reason, but it's a big one.

Whether or not they should have a say is a great question. Now that they do, I'm not sure it can be taken away without them simply choosing the next os that they do have more say over.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by hiccuphippo on Thursday July 11, 2019 @12:16PM (#20412766)
Which is why I prefer to buy my phone independently from the carrier service.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by penagwin on Thursday July 11, 2019 @02:38PM (#20414162)
The parent is pointing out one possible motive for a large carrier, who has to deal with what I call the "general public".

> Which is why I prefer to buy my phone independently from the carrier service.

You're clearly a tech literate person, which is great! But I've worked at a phone/computer repair/resell store for 2 years, and let me tell you, the "general public" can be very interesting.

It's common for many people to not know that their "phone runs android". Let alone the which version LOL!

What I'm trying to say is, it's great that you buy your phone that way, and that's the smart way to do it. We've had plenty of customers looking for unlocked phones too, but even then many don't understand how there's different radios in the phones that work with different carriers, some didn't actually know what being "unlocked" means, etc.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @01:10PM (#20413300)
I’m able to buy a Windows computer from third parties and still get an update from Microsoft....
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by bfdm on Thursday July 11, 2019 @05:39PM (#20416134)
Then they should also be held responsible for the fallout (technical or financial) caused by an unpatched security bug.

Then it's just a liability and risk choice for them. If the user is not able to update, then they shouldn't be the ones on the hook if there are problems.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by JustSomeNobody on Thursday July 11, 2019 @11:37AM (#20412358)
Because carriers have a tremendous fear of being simple data pipes.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @12:10PM (#20412687)
Apple pushed the carriers to allow it to update its own operating systems over a decade ago.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by throwaway5752 on Thursday July 11, 2019 @12:41PM (#20413012)
Apple's situation is completely different from Android. Demand for iphone devices was the leverage Apple had over carriers to do this, and it's not a fragmented ecosystem in the first place.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by ppseafield on Thursday July 11, 2019 @02:28PM (#20414073)
Apple created that demand. They were exclusively on AT&T at first, and aggressively negotiated that contract so they wouldn't have to have carriers' horrible bloatware. Then the exclusivity made negotiating with other carriers easier.

Google didn't even make any phones until much later. Instead they gave phone manufacturers the green light to do whatever they wanted. They ended up designing phones later because of how crappy the Android phone ecosystem had become. Google could have made Nexuses from the get-go.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @01:13PM (#20413337)
Google had plenty of leverage early on with carriers that didn’t have the iPhone. Google still has leverage by threatening to withhold Google Play Services. The last thing carriers want is not to have an alternative to Apple and no cheap phones to entice customers.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by JustSomeNobody on Thursday July 11, 2019 @01:02PM (#20413221)
Yeah, I know this. I don't think anyone at any of the other phone manufacturers has the weight to throw around that Jobs did, though.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by benburleson on Thursday July 11, 2019 @11:50AM (#20412460)
Is there really some expectation for a carrier to be more than that? I just want a fast, reliable service that connects my phone to the internet. Is there actually profit in providing more than that?
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by wyldfire on Thursday July 11, 2019 @12:04PM (#20412619)
From the carrier: yes.

The phone subsidies (in the US at least) are very reminiscent of the old leased phones of yore.

But if you look at the actions of mobile phone carriers and ISPs they're desperate not to become dumb pipes. They design all kinds of clever mechanisms and marketing strategies to distinguish themselves.

> Is there actually profit in providing more than that?

Well, in a free market, competition is intense. So if they can find ways to distort that, then yes: they will make more money. Many of us don't have much allegiance to particular gas station brands. But they create rewards programs to try and get some of that loyalty. Otherwise you just compete on price.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by bongobongo on Thursday July 11, 2019 @12:56PM (#20413159)
Let's not be silly, there is no market in this case. It's an oligopoly and occasional cartel.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @05:14PM (#20415911)
There is only so much competition you can have in wireless. Different carriers have to have different bands of spectrum and only certain frequencies can be used for cellular.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by bongobongo on Thursday July 11, 2019 @08:11PM (#20417050)
That's why it's not a market. Like I said.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by txcwpalpha on Thursday July 11, 2019 @12:12PM (#20412709)
Being just a dumb data pipe means you aren't differentiated from other dumb data pipes, making it harder to compete with other carriers on anything other than price (reducing revenue) and service reliability/speed (and we all know how awful ISPs are at building out better infrastructure). This does make it much harder to be profitable.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by jethro_tell on Thursday July 11, 2019 @12:00PM (#20412574)
well there's usually a bundle of shit in a carrier OS, it's just not profit from you.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by JustSomeNobody on Thursday July 11, 2019 @01:03PM (#20413237)
From the carrier perspective, sure. Being a dumb pipe is a race to the bottom market-wise.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by codedokode on Thursday July 11, 2019 @03:50PM (#20415106)
Exactly. Contracts, identification, phone numbers are not necessary for this. It could be dead simple: the application on your phone generates a pair of private and public keys. You pay some satoshis to a carrier and get some amount of Internet traffic, using your private key for authentication. If you want to switch to other carrier, you just generate a new key and send some satoshis to its account, and your modem generates a new random IMEI. You generate a new key and new IMEI for every new payment so it becomes difficult to track you and sell data about your location. And you can switch between different providers any time. You can even switch depending on who has a better signal in your current location. No need for identification, making a contract, getting a phone number, selling data about you (because carrier doesn't have it) or reporting your location to the government or courts.

This is ten times better than what any provider offers today. If someone implements this, nobody will want to use old scheme anymore.

Also this should promote competition between carriers.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by dredmorbius on Thursday July 11, 2019 @06:15PM (#20416398)
My (no-carrier) WiFi-only Android tablet ... is also wholly dependent on the hardware vendor for updates, of which to the best of my knowledge has never seen an OS update since date of purchase (though vendor apps, which I've never used and cannot uninstall, have updates pushed, routinely demanding greater permissions).

Of all the monopoly-leverage-based requirements Google could make of Android vendors, demanding update SLA and EOL minima are apparently ones they've never contemplated.

0/10, would not recommend, ever.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by nkozyra on Thursday July 11, 2019 @01:08PM (#20413277)
I don't even buy my phones from the carrier, which makes it even more perplexing.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by brlewis on Thursday July 11, 2019 @01:56PM (#20413762)
This comment and most replies use "carrier" as shorthand for "carrier and/or manufacturer". This looks funny to me because my carrier is T-Mobile and doesn't add bloatware AFAICT. Using "manufacturer" as the shorthand would make more sense to me.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by spiznnx on Thursday July 11, 2019 @02:03PM (#20413830)
T-Mobile does add software to phones. Wi-Fi calling requires T-Mobile-specific OS-level modifications. You won't be able to use it on unbranded unlocked phones. It's definitely not bloatware though.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @03:15PM (#20414601)
WiFi calling is supported on iOS devices across carriers and without T-Mobile making os level modifications.

https://support.apple.com/en-us/HT204039

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by brlewis on Thursday July 11, 2019 @02:11PM (#20413904)
I'm pretty sure the Nexus 5X I got off of craigslist is an unbranded, unlocked phone with an OS from Google, and it makes wifi calls on T-Mobile.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by stevenicr on Thursday July 11, 2019 @09:25PM (#20417354)
It would not surprise me to see kind of an opposite thing - such as other carriers selling phones where they purposefully turned off or hid settings for wi-fi calling, turning on hotspot and similar.. in which case if tmobile sold the same phone, then it would be a matter of them not turning off / hiding.

Would be an interesting chart to show the things the various carriers had turned on / off... added / removed which similar phones.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by pkaye on Thursday July 11, 2019 @05:14PM (#20415916)
I think its already a part of the Android software. I certainly see it enabled on the phone I bought outside of T-Mobile. The only thing I see I need is a the T_Mobile visual mail app but I don't use that much since everything is SMS these days.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by wmf on Thursday July 11, 2019 @03:52PM (#20415129)
This has been somewhat fixed in recent years as my latest unlocked Sony phone has working Wi-Fi calling on T-Mobile.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by bluGill on Thursday July 11, 2019 @12:16PM (#20412765)
The carrier wants your phone to work on their network. A software update could change brick the radio (or just disable the channel they are using) if done wrong.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @12:31PM (#20412916)
Yet Apple has been able to do that for well over a decade and sells phones via carriers. Even if you buy an unlocked Android phone directly you can update it without carrier intervention.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by trevj on Thursday July 11, 2019 @01:44PM (#20413647)
Yes but apple only has ~10 phones that have to be updated at a time, and all share similar hardware with software specifically designed for that hardware. There are so many different hardware setups for android that getting software to work perfectly on all of them is exponentially harder
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by supergeek133 on Thursday July 11, 2019 @12:47PM (#20413078)
Apple has much less risk surface/device variant.
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by simonh on Thursday July 11, 2019 @12:55PM (#20413155)
OK, you're a carrier and have millions of Apple and Samsung devices on your network. 0.01% of your users know how to update the OS on their Samsung phones themselves, or jailbreak their iPhones. A software update from the manufacturer could brick millions of those phones on you network.

Which risk keeps you awake at night:

  A few Samsung phone users bricking their phones occasionally
  A few iPhone users bricking their phones occasionally
  50 million Galaxy phones being bricked by Samsung at once
  50 million iPhones being bricked by Apple at once
I'm not saying it's impossible Apple could do it, but in terms of ratios how much more or less likely is it versus Samsung?
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by scarface74 on Thursday July 11, 2019 @03:16PM (#20414618)
What does jailbreaking phones have to do with updating them?
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by Shorel on Thursday July 11, 2019 @03:44PM (#20415037)
Could, would, are known as 'weasel words' for a reason.

What the carrier actually wants is to force some applications to always be installed in the customer devices, because of shady business deals, a.k.a. 'partnerships'.

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by navigatesol on Thursday July 11, 2019 @03:32PM (#20414850)
>Why should your carrier have any say so in updating your operating system?

You made that choice when you decided you wanted a carrier subsidized phone.