Some Android Smartphone Manufacturers Hiding Missed Security Updates

Krales  The Verge

It further argued that modern Android phones come with security features that make them hard to hack even when they do have unpatched security vulnerabilities. And as vendors chalk up security points for non-existent patches, end users are left with a false sense of security. For J5 customers, those who checked the status of their devices' security were aware of which patches were installed and which were not. But while manufacturers may install some of the fixes, changing the security update date to the latest available in the process, they can fail to install all of the patches bundled in any particular month's update.

The patch gaps and bugs are found in the chips rather than in its operating system.

Android phone makers could also potentially "miss a patch or two by accident", according to SRL's Karsten Nohl.

As per Nohl and Lell most of the companies are either not rolling out the updates on time, or are simply lying regarding the fact that a latest security update has been installed.

The research spanned every Android security patch released in 2017, and utilised 1,200 different makes of device, including items from major manufacturers such as Samsung, Motorola and HTC, as well as Google's own devices.

Device fragmentation has always been a challenge for Google when releasing updates for its Android platform, which is by far and away the most popular mobile software on the planet. While the smartphones of Sony and Samsung were found to have missed few patches, ZTE and TCL lied about 4 or more updates. More disturbingly, they found out that manufacturers also tell users that their phone's firmware is fully up to date, even while they've skipped patches. The vendor has to primarily depend on the chipmaker to offer a security patch and not the OS. Typically, the phones with MediaTek processor were missing on 9.7 security patches which look to be a grave concern and needs to be looked into.

To sum up the findings, vendors such as Google, Sony, Samsung, Wiki on an average missed between 0-1 patches. On many occasions, it was found that the OEMs were hiding as many as a dozen missed patches. In order to help users tackle the problem, SRL Labs will be releasing an update to its SnoopSnitch Android app that allows users to check their phone's code for the actual state of its security updates.

Google's Android product security lead, Scott Roberts, said: "We're working with [SRL] to improve their detection mechanisms to account for situations where a device uses an alternate security update instead of the Google-suggested security update". Built-in platform protections, such as application sandboxing, and security services, such as Google Play Protect, are just as important. "Owing to this complexity, a few missing patches are usually not enough for a hacker to remotely compromise an Android device", the researchers wrote. Google says that some of the devices in the study may not have been Android certified devices, which means that Google's standards of security would not apply to them.

Related News:

  • Alcohol guidelines in many countries may not be safe

    Alcohol guidelines in many countries may not be safe

    People have the right to know how alcohol consumption affects their health so they can make informed choices about their drinking. However, the worldwide study carries implications for countries across the world, where alcohol guidelines vary substantially.
    Spring storms for the weekend

    Spring storms for the weekend

    The setup with this particular storm will be a bit different from the storm system that impacted our region last Friday evening. A handsome Thursday for us as temperatures have climbed into the low 80s this afternoon under abundant sunshine.
    Trump on Syria attack: 'Very soon or not so soon at all!'

    Trump on Syria attack: 'Very soon or not so soon at all!'

    Trump on Wednesday had warned Russian Federation to "get ready" for a missile attack on its ally Syria. In a tweet on Sunday, Trump said those deemed responsible should expect to pay a "big price".
  • Gophers Hire Lindsay Whalen as Head Coach

    Gophers Hire Lindsay Whalen as Head Coach

    National team since 2002, joining Team USA following her sophomore season with the Gophers. "I'm ready to get started". Some fans immediately wanted Whalen; others weren't so sure someone with no coaching experience was the best choice.
    Trump forms task force to study Postal Service operations, finances

    Trump forms task force to study Postal Service operations, finances

    Still, federal regulators have reviewed the Amazon contract with the Postal Service each year, and deemed it to be profitable. In a series of Twitter messages, Trump has accused Amazon of draining the Postal Service of money it can't afford to lose.
    David Pastrnak's Stellar Game 1 Performance Leads Bruins To Win Vs. Leafs

    David Pastrnak's Stellar Game 1 Performance Leads Bruins To Win Vs. Leafs

    Just plain clowning the Tomas Plekanec line around in the attacking zone, Pastrnak's first try from between the circles. The Bruins will look for a 2-0 series lead with a Saturday night head-to-head at a surely rockin' TD Garden.
  • Commonwealth Games: England lose tense women's hockey semi-final against New Zealand

    Commonwealth Games: England lose tense women's hockey semi-final against New Zealand

    Anish had scored 286 in stage 1 and 294 in stage 2 qualifying, while Neeraj had the scores of 291 in stage 1 and 288 in stage 2. Anish Bhanwala won gold in the men's 25m rapid fire pistol and fired a new meet record in the Commonwealth Games .
    Yo-kai Watch 4 announced for Switch in Japan

    Yo-kai Watch 4 announced for Switch in Japan

    Each battle will become tougher than the last as debuffs stack, but new gear can be obtained by successfully conquering trials. The Nintendo Switch got a great flow of games throughout 2017 and it seems like the flow is going to continue through 2018.
    PTI MNA quits party, joins PML-N

    PTI MNA quits party, joins PML-N

    Obviously, PTI party accused supporters of rival Nawaz Sharif's Pakistan Muslim League (PML-N) of circulating this offensive photograph.
  • Arturo Vidal rages at Cristiano Ronaldo penalty during Bayern Munich match

    Arturo Vidal rages at Cristiano Ronaldo penalty during Bayern Munich match

    They'll take on their former star, Mohamed Salah, while Edin Dzeko's aerial ability will be a huge threat to Liverpool's defense. The Chilean was taken off before half-time in his side's Champions League quarter-final second leg with Sevilla last night.
    'I'm Almost Dead,' He Told 911. 6 Hours Later, Body Was Found

    'I'm Almost Dead,' He Told 911. 6 Hours Later, Body Was Found

    Law enforcement looked for the van , but Kyle was dead, stuck between seats in the van , when he was found hours after the calls. A night shift worker at the school also called saying he was with Plush's father in the parking lot.
    Commonwealth Games: Athletes sent home for alleged drug use

    Commonwealth Games: Athletes sent home for alleged drug use

    Police have charged the former athlete with one count of assault occasioning bodily harm and one count of common assault. At the 2006 Commonwealth Games in Melbourne, 26 athletes and officials sought asylum in Australia .


Most liked

65th National Awards: Sridevi wins for 'Mom', regional cinema scores big
Though there is no one from the Malayalam film industry on the panel, Mollywood is hopeful of bagging some key awards this year. Sridevi with Boney Kapoor and AR Rahman during a promotional of the Mom in Chennai a year ago ; PTI Photo by R Senthil Kumar.

Ripple's XRP is '100% Not a Security,' Says Company's Chief Market Strategist
Putting speculations to rest once and for all, one of Ripple's top executives told a financial daily that XRP is not a security. The investment firm is expected to invest in entrepreneurial teams that are blockchain-focused.

Pakistan's top court bars ex-PM Sharif from holding office for life
On February 14, the apex court had reserved its decision in the case to determine the time-period that elected lawmakers will remain disqualified for.

PM Modi reaches Tamil Nadu to participate in Defence Expo
He said India, with its leadership in Information Technology domain, would strive to use this technology tilt to its advantage. After attending the DefExpo, the Prime Minister was scheduled to travel to IIT Madras in the heart of the city.

Hurricane Nate name retired as hurricane name
In 1953, the United States began using female names for hurricanes and, by 1979, both male and female names were used. Four notable storms from the 2017 season had names that will no longer be used for hurricanes, according to the U.N.

Brace yourself, something called "high definition vinyl" is coming
Cutting lathes and nickel-plated stampers to press vinyl are outdated and HD Vinyl will use lasers to etch a better "stamper". The new fundings comes after the Austrain startup Rebeat Innovation filed the initial patent for HD vinyl back in 2016 .

Fortnite servers are dead, in 'emergency maintenance' mode
The game developer is saying that the login issues are directly related to a database error and they are now working a hotfix. Investigating - We're experiencing issues with our account services that may cause login issues.

Jerry Springer television producer charged with killing deaf and partially blind sister
LAPD is urging anyone with additional information to call Detective Dave Peteque, Valley Bureau Homicide, at 805-750-7888. On April 11, 2018, police say, Jill Blackstone "was arrested by Homicide detectives and the Baltimore Police Department".

Comedy Central's 'Broad City' to end after upcoming fifth season
As they said in their statement, Glazer and Jacobson will continue to develop more content for Comedy Central . It's created by former Obama speechwriter David Litt, and Jacobson and Glazer are executive producing.

Chemical arms watchdog confirms United Kingdom findings on Russian-made nerve agent
Security Council to convene a meeting to discuss the report, according to a tweet from Britain's mission to the United Nations. A spokesperson from the Russian Embassy in London described Yulia Skripal's statement as "an interesting read".

Bill Gates and Angelina Jolie Top the List Once Again
When it comes to the most admired people in the world , YouGov surveyed 37,000 people in 35 different countries. Former President Barack Obama is more admired than President Trump in every country except Russian Federation .

All's well that ends WEL: Arsenal off the ropes and into semis
We were in trouble in the first half but once we moved to a back five we were much more stable and didn't concede many chances". Marseille , who are fourth in Ligue 1, have reached their first European semi-final in 14 years.

'Heartbreak' as Irish Overtones singer Timmy Matley dies aged 36
Mr Matley had been due to take part in a charity skydive on May 3 for the The Royal Marsden Cancer Charity . Our thoughts and prayers are with his mom Geraldine and sister Audrey at this heartbreaking time.

JS School Board at 'wits' end' with big decisions
The district also has a flourishing band program and needs to redirect Johnson's time to the middle and high schools, he said. In order to close Salladasburg and Avis Elementary schools, the board must decide at the meeting scheduled for April 30.

Coutinho could receive Champions League winner's medal
However, it means that if Liverpool do win the competition, Coutinho would be entitled to his own winners medal. Coutinho played five times for Liverpool in Europe this term before his £142 million departure in January.