Re:Critical Bluetooth vulnerability in Android
by arendtio on Friday February 07, 2020 @02:49PM
(#22270093)
> Consider that beside Google, any other Android phone manufacturer take around a month before releasing the patches even on current models.
Still the biggest problem. For my PC I can install updates on a daily basis. For my smartphone, I can be happy if there are any updates at all.
Re:Critical Bluetooth vulnerability in Android
by ChrisCinelli on Friday February 07, 2020 @04:06PM
(#22270950)
If your OS is open sourced, the question is: how long does it take from the time the patch is discussed in open places (ex: mailing list or bug trackers for patch approval) and when the patch is deployed?
Almost every month there are security patches for "critical" problems. Just skim throught the blog pages. This is Jan 2020 for example: https://source.android.com/security/bulletin/2020-01-01
Consider this: if I remember correctly somebody on HN was saying that in these days the average time from releasing a patch and exploit found in the wild is 4 days.
Consider that the patches hit the open source code a lot before they are deployed.
Consider that beside Google, any other Android phone manufacturer take around a month before releasing the patches even on current models.
The situation has no easy solutions.