The short lifetime of smartphone security updates makes me want to switch to a linux phone. It's just sad that I have to buy a new device due to software when I am perfectly happy with my current device hardware. I have computers that I have had for over 10 years, and they still get security updates because I keep them on the latest Debian stable. Why can't my phone be like that?

But a Linux phone is much less secure than an Android one, especially GrapheneOS.

Of course once support runs out it's another matter.

Because chip manufacturers like Qualcomm don't support their hardware beyond a handful of years.

I remember hearing that there's a "three year deal" between Qualcomm and OEM's. If they only support the device for three years, they get a mass discount on chips.

No, it's because Qualcomm and co. don't provide specs and source code for the drivers/firmware.

Not true. Qualcomm source code is available... For a cost ;)

And with NDA.

Confirmed by them: https://social.nitrokey.com/@nitrokey/106861543800696270.

I never realized how bad Google is with their own device support: https://support.google.com/pixelphone/answer/4457705

3 years from the date of release is horrible. My iPhone 6S is coming up on 6 years of OS updates and will get at least 1 more with iOS 15.

I remember hearing that a large part of this is that Qualcomm doesn't provide security updates for more than this long so they can't really promise anything more since they may be unable to fix CPU-level flaws.

That being said it would be nice if they could provide support until a CPU-level vulnerability is found. (Or is there a decent chance that they wouldn't be informed?)

On the upside I believe that the Pixel 5 has a Google-"made" SoC so that excuse is gone now. I would love to see a nice long promise of updates. The amount of eWaste generated by a phone every 2 years is awful.

For context Apple promises 5 years from the last sale and in practice supports devices even longer https://support.apple.com/en-gb/HT201624

Qualcomm supplies the entire SoC and this includes drivers and firmware for way more than just the CPU. You can get Lineage OS onto Pixel phones outside of Google's support, but that only includes the OS layer and not the driver/firmware/baseband layer.

I don't think Google can change anything about this really. Qualcomm is the only non vertically integrated vendor of SoCs with the wanted features and quality Google needs (apple is vertically integrated). They don't have any buying power towards Qualcomm. In the hardware business, they are a niche provider. 2% market share in North America, world wide even less.

With the Pixel 6 Google is introducing their own SoC called Tensor. https://blog.google/products/pixel/google-tensor-debuts-new-...

Google said they want to support the phones for 5 years, definitely an improvement. Note that it's not a sole Google product but a collaboration with Samsung, so will likely build on their Exynos IP.

Somewhat related, any suggestions on how to keep an older Pixel secure? Have a Pixel 3 that's about to run out of security updates from Google.

Seems like Graphene only provides legacy support once Google drops support.

Thanks!

I was searching for this information but it wasn't immediately available on their site.

Well that's a complete deal breaker.