Some Android OEMs Reportedly Skipping Security Patches

iPhone X Style Navigation Gestures may arrive in Android P

SRL researchers Nohl and Jakob Lell will also present their study at the Hack in the Box security conference in Amsterdam today.

What I personally can not understand is why companies waste resources on creating "fake" updates that only change the level of patches indicated. They found out that many Android phone vendors fail to make patches available to their users, or delay their release for months. Monthly patches definitely help, but there are general measures in place to ensure that all Android phones have some level of enhanced security. And while this seems like a tough job to keep up with as a consumer - the onus is on the software makers - the authors of the report stated that the app SnoopSnitch will allow you determine if your updates cover the wide swath of patches necessary to stay as safe as possible.

As noted by Wired, there are a few potential reasons for why these phones don't have the latest security updates, other than manufacturers trying to pass their devices off as being more secure than they actually are.

To sum up the findings, vendors such as Google, Sony, Samsung, Wiki on an average missed between 0-1 patches. SRL notes that MediaTek was the biggest offender for chip-level patch omissions - those ended up going up the chain to the OEMs and, thus, were missing from the overall software updates. SRL says that it had tested the firmware on around 1,200 Android phones, looking for whether or not patches had been applied, which led to it finding devices that had changed the dates forward without actually adding the patches in. "That's deliberate deception, and it's not very common", SRL founder Karsten Nohl told Wired.

Goater questions if Aguero has Man City future
Pep Guardiola claims Manchester City did not fail in the Champions League despite their quarter-final exit. He said: "You just have to shut up sometimes".

Night owls tend to die sooner than morning larks
The switch to daylight savings or summer time is already known to be much more hard for evening types than for morning types. Bottom line: Night people are 10% more likely to live a shorter life thank larks are.

Macron: France has 'proof' Assad used chemical weapons
There was no immediate confirmation or indication from Assad's government that Syrian troops entered Douma on Thursday. He said the Syria situation was "very dangerous" and the immediate priority would be to "avert the possibility of war".

The list includes major Android phone makers like Google, Samsung, Xiaomi, OnePlus, Sony, LG, Huawei, Nokia, Motorola, HTC, ZTE and TCL.

Yet, with a growing amount of malicious code coming from more sophisticated actors, those involved in the Android software development chain shouldn't chance missing out on patches in the case that a string of holes leads to a flawless strike. In certain occasions, some devices don't receive those at all.

The company also argued that some missing patches could be to do with a specific phone not offering an affected feature, or a feature being removed entirely as opposed to patching it.

While criminals typically rely on social engineering to attempt to steal data from users, through malicious apps and the like, state-sponsored actors are more likely to exploit missed patches as part of their attacks using previously unknown methods, the researchers say. All that said, Google has reportedly pointed out some details which are worth considering - some of the devices may not have been Android certified devices which means they wouldn't be offering the same standard of security updates as Google and other more trusted OEMs. "These layers of security-combined with the tremendous diversity of the Android ecosystem-contribute to the researchers' conclusions that remote exploitation of Android devices remains challenging".

Related news:

Hot News

isis-killer-beheading-video-story-top More than a dozen Cdns charged in child sex abuse investigation
Apr 14, 2018 - 06:35
Toronto police have helped with 16 investigations in Canada, which have resulted in 13 convictions. Police say within hours the child was rescued and the abuser was caught in Pennsylvania.

isis-killer-beheading-video-story-top Israeli airstrike hits Gaza; Palestinian man reported killed
Apr 14, 2018 - 06:33
Israel says it is doing what it must to defend its border, and to stop any of the rioters getting across the fence. Since the start of the border unrest at the end of March, more than 30 Palestinian rioters have been killed.

isis-killer-beheading-video-story-top Process no more: 76ers' awaited playoff push starts vs. Heat
Apr 14, 2018 - 06:32
Things tend to tighten up in the playoffs, as every possession becomes more valuable. Embiid was injured March 28 in a collision with teammate Markelle Fultz .

isis-killer-beheading-video-story-top Incredibles 2 Trailer Hits Tomorrow
Apr 14, 2018 - 06:32
Incredibles 2 is scheduled for general release on 13 July which makes the earlier Edinburgh screenings extra special. As the calendar turns closer and closer to June 15 , the world waits in anticipation for Pixar's Incredibles 2.

isis-killer-beheading-video-story-top Mystery Mega Millions victor claims $533M jackpot: 'It's life-changing money'
Apr 14, 2018 - 06:30
Wahl said he will work with a financial team in deciding how to use the money to help family members, friends and others in need. It was just the fourth time the jackpot has surpassed the $500 million mark, lottery officials have said.

isis-killer-beheading-video-story-top Cardi B breaks Taylor Swift's Apple Music record
Apr 14, 2018 - 06:29
This more than doubles the previous record of first-week streams by a female artist, held by Taylor Swift ... According to Billboard , Invasion of Privacy beat out Reputation's streaming record before mid-week.

isis-killer-beheading-video-story-top Charlotte Hornets fire coach Steve Clifford after 5 seasons
Apr 14, 2018 - 06:29
The 56-year-old Clifford will be considered for other head coaching vacancies in the National Basketball Association . New York Knicks head coach Jeff Hornacek and Orlando Magic head coach Frank Vogel were both fired earlier this week.

isis-killer-beheading-video-story-top Uber expands settlement with FTC related to cyberattack
Apr 14, 2018 - 06:29
Uber has always maintained its drivers work on the their own time and qualify as independent contractors, or freelancers. In a statement given to this news organization, Uber said it was pleased with Judge Baylson's decision.

isis-killer-beheading-video-story-top China's 161 trillion yuan state-asset watchdog says more M&As to come
Apr 14, 2018 - 06:28
Xi also called on countries to export high-technology goods to China, which has been a point of contention with the U.S. And the fact that China and the United States are now locked in an escalating fight over trade likely won't help.

isis-killer-beheading-video-story-top Police Launch Investigation Into Seven Hills Student Death
Apr 14, 2018 - 06:28
Around the same time Plush was calling 911, the deputy had run into a woman at the school who was getting in his way. A Honda spokesman told the Associated Press that vehicle involved in the incident was a 2004 Honda Odyssey.

isis-killer-beheading-video-story-top Tarantula burger special sold at North Carolina restaurant has legs
Apr 14, 2018 - 06:27
Bull City points out numerous Exotic Meat Month menu items are eaten by people of other cultures on a daily basis. Some people prefer to eat the tarantula first, while some take it all in at once.

isis-killer-beheading-video-story-top Andrea Constand testifies at Bill Cosby's retrial for the first time
Apr 14, 2018 - 06:26
Cosby lawyer Tom Mesereau is poring over inconsistencies in Constand's statements to police about the alleged assault. But those efforts went nowhere, Mesereau said, and Constand left Temple, returning to Canada broke and unemployed.

isis-killer-beheading-video-story-top ASA President Testifies to Congress Regarding Trade Tariffs
Apr 14, 2018 - 06:24
Liu, the vice premier in charge of the economy, who has master's degrees from Seton Hall and Harvard. Xi's most powerful lieutenant, who has cultivated relationships on Wall Street for decades; and Mr.

isis-killer-beheading-video-story-top Trump Directs Cabinet to Look Into Rejoining TPP Trade Agreement
Apr 13, 2018 - 02:55
He has consistently criticized multilateral trade pacts, like the TPP, as a threat to American manufacturing industries .

isis-killer-beheading-video-story-top New Zealand bans new offshore oil exploration to tackle climate change
Apr 13, 2018 - 02:54
She said her goal is for all of the electricity New Zealand uses to come from renewable energy sources by 2035. But New Zealand National Party MP Jonathan Young described the move as " economic vandalism ".