It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
immi101: and most of the systems running >3.8 will be using Android >5, which has SELinux enabled. Which (according to the bug analysis) makes it a lot harder to actually exploit this.

that being that said, thanks to the screwed up update situation on 90% of android devices, you better throw away any expectations of security and treat the device like running a win98 system with internet access :p
avatar
dewtech: And as with Win98 on the Internet,old Androids are MOSTLY safe as most exploits don't target it anymore.
dunno if that comparison fits ...
win98 is not targeted because the number of targets is simply too small.
in contrast there are tons of outdated android devices out there
avatar
Painted_Doll: sarcasm ?
The bait is strong with me, as the deductive skills are strong with thee. :D
avatar
dewtech: And yeah, Androids are fu**ked, unless you got a Nexus, a premium smartphone or a good manufacturer who actually updates Android.
... or resort on the harder method of compiling a custom rom yourself... (some forum profide help and guidance to such process)
avatar
MaximumBunny: It's times like these I'm glad to be on Windows 10 with a Windows Phone. Thank you Microsoft. (づ⌐■‿ ■)づ
avatar
Painted_Doll: sarcasm ?
I feel it is a solid challenger for my 2016 "slapping someone's face with a crowbar" award :)
anyway let people enjoy the digital footprint dissecting telemetrics uberfactory called win10

(edit: i feel it was pretty sure a sarcasm because no one everuse a windows phone or know how to use it either... and last time i asked a mobile manufacturer's PR/salesman, he couldnt even sync or synergize a windows phone with a windows computer or network but it was back in 2013 then; i'm sure things got even worse since then :))
Post edited January 21, 2016 by Djaron
avatar
dewtech: And as with Win98 on the Internet,old Androids are MOSTLY safe as most exploits don't target it anymore.
avatar
immi101: dunno if that comparison fits ...
win98 is not targeted because the number of targets is simply too small.
in contrast there are tons of outdated android devices out there
Yeah, nah. https://developer.android.com/about/dashboards/index.html
See the version usage. Everything under version 4.2 is actually outdated, over it they get Play Services updates and everything, so tecnically not outdated guy-person-whatever.
Add the percentages together and the number using outdated versions ain't that bad
A silver lining to this would mean it should be easier for people to get root access on their locked phones.
Interesting comment from The Tech Report:

"Lollipop & Marshmallow have SELinux enable, which negates this exploit, and most older versions of Android will be running an older version of the Linux kernel, which of course doesn't have this exploit."

That said, older versions of Android would have other exploits, so it's not like owning an older version makes you safe.
Well this does not effect Linux Mint or Ubuntu user if they did not play with their kernel install since default kernel installed at the moment is 3.19 so nothing happening on pcs. Just journalists overblowing the issue past the android scheme.
Post edited January 21, 2016 by Matruchus
avatar
immi101: dunno if that comparison fits ...
win98 is not targeted because the number of targets is simply too small.
in contrast there are tons of outdated android devices out there
avatar
dewtech: Yeah, nah. https://developer.android.com/about/dashboards/index.html
See the version usage. Everything under version 4.2 is actually outdated, over it they get Play Services updates and everything, so tecnically not outdated guy-person-whatever.
Add the percentages together and the number using outdated versions ain't that bad
Play Service updates don't help for system bugs like this one. Fixing this requires a firmware update which needs to come from the manufacturer.
And the willingness to provide these updates for older smartphone models is notoriously bad.
avatar
dewtech: Yeah, nah. https://developer.android.com/about/dashboards/index.html
See the version usage. Everything under version 4.2 is actually outdated, over it they get Play Services updates and everything, so tecnically not outdated guy-person-whatever.
Add the percentages together and the number using outdated versions ain't that bad
avatar
immi101: Play Service updates don't help for system bugs like this one. Fixing this requires a firmware update which needs to come from the manufacturer.
And the willingness to provide these updates for older smartphone models is notoriously bad.
Same with Win98 aswell, no more updates, at least on older Androids you get fixes for more known malware, or did you change the theme already?
avatar
Matruchus: Well this does not effect Linux Mint or Ubuntu user if they did not play with their kernel install since default kernel installed at the moment is 3.19 so nothing happening on pcs. Just journalists overblowing the issue past the android scheme.
Fearmongering. They love doing that.
avatar
dewtech: Same with Win98 aswell, no more updates
exactly,
which is why I made the comparison
glad we agree :p

edit:
not really sure why you continue to argue. Do you really believe there is no problem with the state of security of android devices? If you don't want to believe me, fine. Just do some googling yourself.
There is a broad agreement that the update situation is a total disaster.

e.g.
Android's update strategy doesn't scale, and that's a recipe for disaster

Google-funded study reveals Android security is a total disaster
How bad is this? Because of Android’s highly fragmented distribution and because third parties are responsible to delivering critical patches to their devices, the researchers estimate that 90% of Android devices right now are exposed to at least one critical vulnerability. ...
Post edited January 21, 2016 by immi101
And I always thought it was so annoyingly overcomplicated to get devices rooted (I mean, they could just implment a root option with a big sign written with red text that it is dangerous and you lose all rights to warranty bla bla), perhaps this is why it's good to have at least some complication behind it.

Anyone here that owns a OnePlus One phone? I was always curious how well they handled updates especially now that it is relatively old.