Re:A Year in Review of 0-days Exploited In-the-Wild in 2022
by callalex on Sunday July 30, 2023 @11:02PM
(#36938381)
The downstream vendors just don’t give a hoot. It’s been more than 10 years now and their behavior hasn’t changed. Google has moved mountains to throw as much as they can into userspace which can be patched by Google directly, but that effort has hit its limits. The rest will just never get better, because phone manufacturers love forced obsolescence, and when any exploit causes a serious issue they can just disingenuously point their finger at Google and say “well they made the software”.
[ Parent
| on HN ]
Re:A Year in Review of 0-days Exploited In-the-Wild in 2022
by fatfingerd on Monday July 31, 2023 @04:30AM
(#36940059)
Now hold on.. Google made not just the software but the structure that makes it practical for Google and hardware makers like Qualcomm to get their cake and the vendors to somehow be responsible for the gap it causes when every vendor has to integrate drivers separately into orphans of the Linux kernel.
Many vendors happily joined Android One which Google seems to have silently killed, so I don't think they are that happy losing reputation to sell Android phones they can't properly support.
Re:A Year in Review of 0-days Exploited In-the-Wild in 2022
by evilduck on Monday July 31, 2023 @11:36AM
(#36944235)
Not so unhappy that they will stop doing it. They earn their reputations by continuing to bring these poorly supported products to market despite the situation being very well established.