News for hackers. Stuff that matters.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by boring_twenties on Sunday February 16, 2020 @09:23PM (#22345090)
If arbitrary code execution, according to Samsung, is of "moderate" severity, I'd hate to see what their idea of a real bug is!
Re:Google to Samsung: Stop messing with Linux kernel code. I... by gradys on Sunday February 16, 2020 @09:31PM (#22345122)
The highest level of severity is reserved for anything that allows users to uninstall the crapware they ship with their phones.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by raverbashing on Sunday February 16, 2020 @11:15PM (#22345562)
No kidding

It's ridiculous how a brand new phone from Samsung comes with non user-removable Facebook spyware and all their Bixby stuff that all want you to create an account

Re:Google to Samsung: Stop messing with Linux kernel code. I... by amphibian87 on Monday February 17, 2020 @12:05AM (#22345730)
I broke my phone and bought a cheap burner phone, it was 20 dollars and honestly I'm not sure I'll ever buy a nice phone again. It's 720/1gig of RAM but it's only a mild annoyance, it's just as good as my old expensive one.

Anyway it came preinstalled with FB and I'm wondering now if, even though I deactivated it, it spies.

That's for sure why the phone was for sale at that price, it's subsidized with lots of bloat ware

Re:Google to Samsung: Stop messing with Linux kernel code. I... by tbrock on Monday February 17, 2020 @12:35AM (#22345818)
Vote with your wallet and buy pixels or Apple phones.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by mschuster91 on Monday February 17, 2020 @05:34AM (#22346701)
The problem is no one except Samsung makes any decent tablets, and even Samsung is hardly decent - crap cameras, no NFC... and the Apple ecosystem is a walled garden.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by tbrock on Monday February 17, 2020 @10:13AM (#22348206)
Pick your poison I guess. I’d rather have security than freedom when it comes to a cell phone. I’d also rather Apple decide what the wall looks like than Verizon.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by pjmlp on Monday February 17, 2020 @09:16AM (#22347817)
Microsoft, Asus and Huawei also do nice tablets.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by scarface74 on Monday February 17, 2020 @09:28AM (#22347895)
Microsoft tablets are far from “nice”. They run Windows with all of the bloat that entails.

This isn’t meant to be an anti-MS screed. I would say the same if Apple released a “Mac tablet”. Windows is perfectly fine as a PC operating system and I use it everyday and have been developing on and for Windows my entire career. But, as a tablet operating system - No.

It’s only been within the last couple of years that I’ve been deploying to Linux and it’s still .Net Core.

Re:Google to Samsung: Stop messing with Linux kernel code. I... by raverbashing on Monday February 17, 2020 @02:40AM (#22346180)
Pixels are not so easy to buy for some reason (outside of the US), only through the web site and some stores.

I'm also voting with my wallet against Apple taking out the headphone jack.

Re:Google to Samsung: Stop messing with Linux kernel code. I... by tialaramex on Monday February 17, 2020 @03:02AM (#22346231)
I bought my current Pixel by walking into a nearby store the night after my previous phone bricked itself in my hotel room, and simply picking the box up and walking to the register. Getting them to sell me just a phone, and not insurance, maintenance, service, style advice, or a fitness plan took about ten minutes, but buying the phone was easy.

Persuading Google and everybody else relevant that this was not a SIM hijack (new phone, same number, old phone was totally bricked so couldn't help, other non-work PCs were hours away) was not easy but I wouldn't want it to be.

Re:Google to Samsung: Stop messing with Linux kernel code. I... by rjzzleep on Monday February 17, 2020 @03:52AM (#22346411)
I wanted to buy a Japanese Pixel 4 because of the local train access, but it was so ridiculously expensive. In the USA there are constantly discounts allowing you to buy the pixels for a couple hundred dollars below retail price.

In Japan and other places of the world the whole thing is over a hundred bucks more expensive than retail. Over a 1000 dollars for a phone?

I'd rather buy an iPhone then. I ended up getting a second hand iPhone 8 for $250 as second device instead. Most of it better than most previous year android flagships and dirt cheap with 97% battery capacity.

I'm trying really hard to keep my "freedom" on android devices, but what the actual f. The only reasonably priced flagship CPU devices are from Xiaomi.

Most companies either don't have the ability to unlock the bootloader anymore or brick some random thing of the device or software if you do. Yeah sure the pixel does that and has good source code support, but over 1000 USD for 128 GB? Apple devices have better value for money and you won't have to play lottery about whether the next two android updates will actually work properly.

Re:Google to Samsung: Stop messing with Linux kernel code. I... by mercer on Monday February 17, 2020 @06:59AM (#22347064)
What's the price of a Pixel 3A in your part of the world?

I got one after having iPhones since the Nexus 3 (I think), and I'm quite happy with it. It cost me 300 euro, and it feels like it can handle everything I need. I specifically went for the Pixel 3A because leaving the Apple ecosystem I wanted the alternative that is most likely to be stable, updated, and not filled with crapware. so far I have no complaints, and I even prefer much of this new phone over my previous iPhones (iPhone 7, iPhone 5S before that).

Re:Google to Samsung: Stop messing with Linux kernel code. I... by csunbird on Monday February 17, 2020 @04:43AM (#22346554)
I only buy Apple products, because of their durability. One of my friends are still using an iphone 6s, he did not even needed to change the battery
Re:Google to Samsung: Stop messing with Linux kernel code. I... by Intermernet on Monday February 17, 2020 @06:02AM (#22346813)
Hey, I have a completely functional, regularly used Samsung Galaxy S5 (IMO the last good phone Samsung made, and I currently run an S9 as my daily phone, and my partner has an S10).

Anecdata is weird when it comes to mobile devices. It seems that some phones are really not created equal to others in the same production run. I presume it's sort of like processor binning, but not actually tested in the factory. Every now and then a customer gets a phone that performs perfectly, and the battery lasts for over a decade (obviously with recharging!) ;-)

Re:Google to Samsung: Stop messing with Linux kernel code. I... by csunbird on Monday February 17, 2020 @08:34AM (#22347539)
I agree on personal experience varies wildly.

I also bought an iphone 7 three years ago and it was working fine with 85% battery life, before I broke the screen and replaced it.

Before phone, I was using Samsung phones exclusively, S4, Note 4 etc, they all died within two years.

Re:Google to Samsung: Stop messing with Linux kernel code. I... by scarface74 on Monday February 17, 2020 @09:31AM (#22347908)
You realize that the Pixel 2,3 and 4 also don’t have headphone jacks....
Re:Google to Samsung: Stop messing with Linux kernel code. I... by takeda on Monday February 17, 2020 @10:29AM (#22348327)
It didn't sound like he uses Pixels.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by scarface74 on Monday February 17, 2020 @10:36AM (#22348388)
He mentioned buying a Pixel but didn’t because of the difficulty in buying one. One of his primary complaints against an iPhone was about it not having a headphone jack.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by skinnymuch on Monday February 17, 2020 @07:01PM (#22352170)
Newer Pixels have the same issue as iPhones that you mentioned (Jack)
Re:Google to Samsung: Stop messing with Linux kernel code. I... by StreamBright on Monday February 17, 2020 @02:52AM (#22346205)
https://store.google.com/regionpicker

Not sure what you are talking about. If I google buy google pixel outside of the US it takes me to this where I can select my region. I includes many regions/countries outside of the US.

Re:Google to Samsung: Stop messing with Linux kernel code. I... by graycrow on Monday February 17, 2020 @03:13AM (#22346268)
Many, but not all. Half of Europe is missing, for example.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by cesarb on Monday February 17, 2020 @06:55AM (#22347041)
Also missing is all of the American continent other than North America and Brazil. And selecting Brazil, there's only the Nest Mini and the Chromecast, and nothing else.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by StreamBright on Monday February 17, 2020 @07:46AM (#22347277)
Sorry I did not go through the purchase process, it seems you cannot ship phones outside of the country where it is available.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by mikro2nd on Monday February 17, 2020 @04:02AM (#22346436)
And all of Africa.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by SimplyUnknown on Monday February 17, 2020 @04:03AM (#22346441)
Pick the Netherlands, for example. No way to buy any (smart)phone.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by josefx on Monday February 17, 2020 @02:07AM (#22346085)
On the one hand I agree, on the other why should Google have a monopoly on adding bloatware to my phone. Might as well go the whole nine yards and pre patch the unremovable chrome with an ask toolbar.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by Intermernet on Monday February 17, 2020 @06:05AM (#22346823)
It's a bit easier to remove Chrome from a Pixel than it is to remove Safari from an iPhone!
Re:Google to Samsung: Stop messing with Linux kernel code. I... by Aweorih on Tuesday February 18, 2020 @06:48PM (#22361661)
At least can you disable facebook, Bixby sadly not..
Re:Google to Samsung: Stop messing with Linux kernel code. I... by cjbprime on Sunday February 16, 2020 @10:04PM (#22345275)
HN snark is doing great recently. See also: https://news.ycombinator.com/item?id=22300333
Re:Google to Samsung: Stop messing with Linux kernel code. I... by pjmlp on Monday February 17, 2020 @02:24AM (#22346140)
Easy, have a look at the quality of Tizen.

https://what.thedailywtf.com/topic/15001/enlightened

Re:Google to Samsung: Stop messing with Linux kernel code. I... by orev on Sunday February 16, 2020 @11:17PM (#22345569)
The higher levels are used for things like remote code execution, and remote code execution that does not require user interaction. Things that are local only are not as big of an issue, especially on a single user device.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by SpicyLemonZest on Sunday February 16, 2020 @10:41PM (#22345422)
Moderate is typically a reasonable severity for, in the article's words, "possible arbitrary code execution". Lots of bugs might allow arbitrary code execution - too many to address them all at the same severity as a vulnerability known for sure to allow it.
Re:Google to Samsung: Stop messing with Linux kernel code. I... by redis_mlc on Sunday February 16, 2020 @10:56PM (#22345489)
That ship sailed over a decade ago.

Arguing that a buffer flow, etc. is only theoretical unless you can show an exploit is nonsense at this point.

Re:Google to Samsung: Stop messing with Linux kernel code. I... by SpicyLemonZest on Monday February 17, 2020 @12:12AM (#22345756)
It makes it less likely that an attacker has right this second found and begin using an exploit. As you say, the ship has sailed over a decade ago; your stack will have unpatched CVEs, no matter how cautious you are or how hard you work. The most important parameter that remains available is which patches require which degree of expedited rollout.