News for hackers. Stuff that matters.
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by KronisLV on Tuesday September 26, 2023 @11:21AM (#37660681)
> A phone released in October 2020 is about to stop getting security updates?!

I actually looked into it, my previous phone was released in June 2020.

The last security update for the phone came out in January 2022.

I'm not sure whether they're just updating things infrequently or whether that model is abandoned altogether, but neither would speak highly of the Android support landscape for non-flagship phones.

This ends up being kind of silly: if I want to have a mostly secure backup device (for 2FA and my bank/eID apps), then I probably need two comparatively recent devices, since a 5 year old budget phone would no longer quite do as a temporary daily driver, in case I'd lose my main phone.

Re:Google assigns a CVE for libwebp and gives it a 10.0 score by izacus on Tuesday September 26, 2023 @11:52AM (#37661154)
Which phone would that be?
Re:Google assigns a CVE for libwebp and gives it a 10.0 score by KronisLV on Tuesday September 26, 2023 @12:16PM (#37661534)
It's this manufacturer https://www.ulefone.com/index.html and probably many more out there, typically in the budget segment.

I can say that their rugged designs served me well, but some of the newer phones apparently have this weird component for wireless earphones and I don't really want that, so my current and future purchases are from different manufacturers. Was actually pretty close to stock Android, though!

Re:Google assigns a CVE for libwebp and gives it a 10.0 score by izacus on Tuesday September 26, 2023 @12:19PM (#37661583)
Oh yeah, those OEMs are outright terrible with their support cycles :(