this post was submitted on 20 Oct 2024
1 points (100.0% liked)
Android
1 readers
14 users here now
Android news, reviews, tips, and discussions about rooting, tutorials, and apps.
General discussion about devices is welcome. Please direct technical support, upgrade questions, buy/sell, app recommendations, and carrier-related issues to other communities.
Rules
Rules
- Stay on topic: All posts should be related to the Android operating system or ecosystem.
- No support questions/rants/bug reports: All posts should benefit the community rather than the individual. Please refrain from posting individual support questions, rants, or bug reports.
- Describe images/videos: Please provide an explanation in the self-post body when sharing images or videos. Memes are not allowed.
- No self-promotional spam: Only active members of the community can post their apps, and they must participate in comments. Please do not post your own website, YouTube, or blog.
- No reposts/rehosted content: Submit original sources whenever possible, unless the content is not available in English. Reposts about the same content are not allowed.
- No editorializing titles: Do not change article titles when submitting. You may add the author if relevant.
- No piracy: Do not share or discuss pirated content.
- No unauthorized polls/bots/giveaways: Do not create unauthorized polls, use bots, or organize giveaways without proper authorization.
- No offensive/low-effort content: Avoid posting offensive or low-effort content that does not contribute positively to the community.
- No affiliate links: Posting affiliate links is not allowed.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
@[email protected]
Many Android OEMs commit to providing long term security support but don't follow through on it or do it very poorly. As an example, Fairphone ships the partial security patch backports with 1-2 months of delay and the rest of the patches with up to a year of delay for a new device and longer as the device gets older. They portray shipping updates in 2022 which were released in 2020 as providing 2 more years of support than their competitors. It shouldn't be challenged more.
@[email protected]
For both Android and iOS, only the latest OS release receives full security patches. Android backports more than iOS to older releases, but it's only the High and Critical severity patches. Nearly all Moderate and lower severity patches aren't backported including most privacy fixes.
Each month, there's a new Android release. The monthly security patches are the incomplete backports, not the latest release. Non-Pixel OEMs only ship the incomplete backports at best right now.
@[email protected]
With the example of Fairphone, they ship the Android Security Bulletin backports with a 1 or 2 month delay. They don't ship monthly or quarterly releases, so they miss all those patches. The yearly updates get shipped with at least 1 year of delay, so they can't ship the current monthly and quarterly releases without fixing that first. The delays get longer as the devices get older, until the point it's multiple years with the delays portrayed as providing longer support.
@[email protected] With the example of Fairphone, they ship the Android Security Bulletin backports with a 1 or 2 month delay. They don't ship monthly or quarterly releases, so they miss all those patches. The yearly updates get shipped with at least 1 year of delay, so they can't ship the current monthly and quarterly releases without fixing that first. The delays get longer as the devices get older, until the point it's multiple years with the delays portrayed as providing longer support.
@[email protected] @[email protected] I have read once that iOS only ships full security patches on the latest release. Do you have a source for this information?
@[email protected] @[email protected] Apple makes that fairly clear themselves by the fact they only backport a subset of the patches and don't really like acknowledging they're even still providing support since they want people to move on. You can find many sources for it by searching for it but whether those should be considered reliable is another story. We don't particularly see a reason to reference what someone else says particularly if they often get things wrong.