this post was submitted on 01 Oct 2023
69 points (93.7% liked)
Boost For Lemmy
7048 readers
2 users here now
Community of the Android app Boost for Lemmy
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
So there is no central framework for pushing fixes to urgent fixes? Patching zero-days?
Welcome to the wonderful world of Android. They're rolled into the monthly AOSP security patch and end users are at the mercy of the OEM's update schedule.
This is why Pixel phone regular updates are a big deal, and a reason to run a regularly updated third party ROM like LineageOS.
This is the very reason why I use LineageOS (as well as getting rid of bloatware).
As a person thatβs been rolled into smartphones via work (iPhone 3Gs) and then never daily driven an Android, but always thought it might be more to my liking, Iβm aghast. How can this be accepted? I now understand why large botnets often is comprised of Android devices.
Zero days aren't the big driver of botnets, there are millions (if not hundreds of millions) of very cheap, very old, android devices out there. If you look at the periodic stats Google releases >50% of devices are running an Android version <= 10. Something like 20% of Android devices (at least according to the stats Google provides) running Android <= 5.
Per earlier this year: https://m.gsmarena.com/android_13_is_now_running_on_12_of_devices_in_the_wild-news-58244.php
I'm assuming these stats don't even cover a huge number of cheap Indian or Chinese devices too, those don't come with Google services at all.