Wednesday, 25 April, 2018

Some Android OEMs Reportedly Skipping Security Patches

Gmail’s current design as viewed on the web Gmail’s current design as viewed on the web
Terence Owen | 13 April, 2018, 10:38

These OEMs have just been changing the date of the security patches on the device without actually installing the associated patches an have been misleading their users.

This is according to Wired which reported on research set to be published tomorrow at the Hack in the Box security conference. That can mean frustration for those waiting for the latest and greatest feature updates - and in some cases, it can put your phone at risk with delayed or missed security updates.

The patch gaps and bugs are found in the chips rather than in its operating system.

What's The Story Of Android's Security Patches All About?

Have proof of Assad regime using chemical weapons in Syria: France Prez
Since Saturday, several thousand rebels and civilians have left Douma for opposition-held territory in the north of Syria . Syria and its ally Russian Federation have both denied involvement amid worldwide outrage over Saturday's incident.

With Android P, "all traffic should be encrypted, regardless of content, as any unencrypted connections can be used to inject content, increase attack surface for potentially vulnerable client code, or track the user", Android security engineer Chad Brubaker wrote. This is incredibly simple to fake-even you or I could do it on a rooted device by modifying ro.build.version.security_patch in build.prop. The researchers looked into 1,200 handsets from companies like Samsung, Sony, Google, Huawei, Motorola, LG, HTC, and more and discovered that there is usually a "patch gap" between what the mobiles say have been updated and what patches have been installed. Google's phones seem to be safe, however, as the Pixel and Pixel 2 series did not misrepresent what security patches they had. In other cases, there was no reasonable explanation for why some phones claimed to patch certain vulnerabilities when in fact they were missing multiple critical patches.

For all the good of Android's open-source approach, one of the clear and consistent downsides is that the onus to issue software updates falls on the manufacturer. Unsurprisingly, Pixel phones are the best, accurately indicating that they're up to date with security fixes, and devices from Samsung and Sony aren't far behind, maybe only missing one fix out of a larger batch. There is no official comment on this by Google; however we will keep you posted with further updates related to the security patches, so stay tuned with us. Does that necessarily mean that TCL and ZTE are at fault? Cheaper chips from the lower-end suppliers missed the most patches with a less well-maintained Android ecosystem.

The researchers noted that the SoCs that the smartphones use may be the cause of the issue. We're working with them to improve their detection mechanisms to account for situations where a device uses an alternate security update instead of the Google suggested security update. If you are interested in seeing what patches your device is missing, the team at SRL labs has created an Android application that analyzes your phone's firmware for installed and missing security patches.

Recommended

  • Pennsylvania school district arming teachers with baseball bats to combat active shooters

    Pennsylvania school district arming teachers with baseball bats to combat active shooters

    Livingston Junior High, West End Junior High and Kinterbish Junior High would be choices for students moving forward. Rita Hocog Inos High School, and Da'ok Academy.
    Greitens' defense team accuses prosecutors of perjury

    Greitens' defense team accuses prosecutors of perjury

    Missouri Senate Democrats are considering stopping all votes on House bills to keep them from appearing on Republican Gov. Schaaf says that would save lawmakers the extra cost of a special legislative session to consider whether to impeach him.
    Social media explodes following the latest Yankees-Red Sox brawl

    Social media explodes following the latest Yankees-Red Sox brawl

    That was when Austin slid hard into second base with his spikes up at Red Sox shortstop Brock Holt , who took offense to it. Even if he's not, Aaron Hicks finished his Triple-A rehab assignment and headed for Boston after his game Wednesday night.
  • Summer Gas Prices to Spike to Highest in Four Years

    Summer Gas Prices to Spike to Highest in Four Years

    You're eyes are not deceiving you, gas prices are in fact getting higher and are not expected to get better anytime soon. To say that retail gasoline prices have been volatile this year may be stating the obvious.
    Coli outbreak in 7 states

    Coli outbreak in 7 states

    Symptoms of E. coli infections include diarrhea, severe stomach cramps, and vomiting which can go away within a week. Wash fruits and vegetables before eating, unless the package says the contents have been washed.
    Backpage.com Made $500 Million From Prostitution, Say Prosecutors

    Backpage.com Made $500 Million From Prostitution, Say Prosecutors

    Two people affiliated with the San Francisco-based website faced money laundering , racketing and prostitution charges. The Dutch-owned company is incorporated in DE , but its principal place of business is in Dallas.
  • Argentine police officers who claimed rats ate missing pot are fired

    Argentine police officers who claimed rats ate missing pot are fired

    The 6,000kg stash of hash had been in police lock up for two years, but only 5460kg were accounted for during the inspection. But when investigators went to check on it, they found more than half a ton of it - 540kg to be exact - had disappeared.
    Janice Dickinson testifies Bill Cosby raped her

    Janice Dickinson testifies Bill Cosby raped her

    When Mesereau pressed her about untrue aspects of the book, she shot back, "So what?" "You lied to get a paycheck", Mesereau said. On the witness stand, Dickinson cut a striking figure, tall and slender with long brunette hair parted in the middle.

    Premier Asset Managment LLC Stake in Nxp Semiconductors NV (NXPI) Decreased

    It increased, as 25 investors sold GGG shares while 7 reduced holdings. 98 funds opened positions while 335 raised stakes. The semiconductor provider reported $3.06 EPS for the quarter, beating the Zacks' consensus estimate of $1.61 by $1.45.
  • Cameroon athletes vanish at Commonwealth Games

    Cameroon athletes vanish at Commonwealth Games

    Cameroon officials are still working with the Australian Border Force to locate their eight missing athletes. At London 2012, seven Cameroon athletes disappeared during the Olympics.
    Trump Has the Power to Fire Mueller, White House Says

    Trump Has the Power to Fire Mueller, White House Says

    But asked whether Trump can fire Mueller, she insisted that he could. "I think it would provoke some sort of reaction by Congress. Trump is reported to have considered firing Mueller in December 2017 and in June 2017, according to the New York Times .
    Calcutta HC stays West Bengal panchayat polls, opposition welcomes order

    Calcutta HC stays West Bengal panchayat polls, opposition welcomes order

    The matter had reached the apex court earlier, which advised the petitioner to move the Calcutta high court. The BJP unit approached the top court challenging recall of the order allowing the extension.

Australia: 'Landmark' cricket broadcast deal Australia: 'Landmark' cricket broadcast deal Network Ten has issued the statement below in relation to cricket television rights negotiations. Foxtel would have rights to broadcast every ball bowled, simulcasting what is on free-to-air.

Sounds Like Bill Hader's Headed For Derry — CHAPTER TWO Sounds Like Bill Hader's Headed For Derry — CHAPTER TWO Hader is in talks to play the grown-up Richie Tozier, who was played in the first film by Stranger Things' Finn Wolfhard . Hader can now be seen on the HBO series Barry , which was recently renewed for a second season .

Russian Federation vetoes United Nations resolution on Syria after suspected chemical attack Russian Federation  vetoes United Nations  resolution on Syria after suspected chemical attack The vote Tuesday afternoon in the 15-member Security Council was 12 in favor. The OPCW has said the team of experts will deploy to Syria shortly.

A'ja Wilson picked first overall in 2018 WNBA Draft A'ja Wilson picked first overall in 2018 WNBA Draft She also has an uncle and aunt who are rather famous - former President Barack Obama and former First Lady Michelle Obama. Vivians grew into the Bulldogs' star during their run of back-to-back appearances in the NCAA title game.

Tiger Woods officially commits to 2018 US Open Tiger Woods officially commits to 2018 US Open His first-ever appearance came at the site of this year's event - Shinnecock Hills Golf Club in Southampton, N.Y. The tournament, which is set for June 14-17, will mark the 20th time Woods has played in the U.S.

Ohio Teen Dies After Becoming Trapped in Folding Seat of Van; Asked 911 Operator to 'Tell My Mom I Love Her' Ohio Teen Dies After Becoming Trapped in Folding Seat of Van; Asked 911 Operator to 'Tell My Mom I Love Her' There was a recall in 2017 for about 800,000 Honda Odyssey vans due to second-row seats accidentally tipping forward. Two officers undertook the responsibility of investigating the call despite of their suspicion that it was a hoax.

MMA star McGregor released on bail after NY assault MMA star McGregor released on bail after NY assault The dolly McGregor threw broke a passenger window and injured two fighters, forcing their removal from Saturday's card. His father, Tony, also posted a photo of him and his son, decked out in formal wear, writing: "DNA, it's who we are".

No Warner, no worries: Sunrisers win again No Warner, no worries: Sunrisers win again Mumbai Indians would have got off to the most-disastrous-start possible were it not for a huge reprieve from Deepak Hooda . Dhawan's 45-run innings was also halted by Markande when he hit the ball straight into the hands of Bumrah at square leg.

Tyrann Mathieu stands up for Jarvis Landry's big new contract Tyrann Mathieu stands up for Jarvis Landry's big new contract They didn't create all that space by paying out huge contracts to players who aren't the number one option at their position. However, his value is questionable given his propensity to operate out of the slot and his lowly yards-per-catch numbers.

Nokia 3 - Price, Full Specifications & Features at Gadgets Now Nokia 3 - Price, Full Specifications & Features at Gadgets Now It has kept up the promise of delivering the Android 8.0 Oreo update for the Nokia 3, which is an entry-level mobile smartphone. The Nokia 3 was the last remaining device of the three that the Finnish company launched in Kenya in July previous year .

Badminton player Srikanth Kidambi becomes World No 1 Badminton player Srikanth Kidambi becomes World No 1 Srikanth managed to achieve the top position when Axelsen lost 1660 points for not participating at the Malaysian Open past year . He is now atop with a total of 76,895 points, while Viktor lost 1660 points to slip down to 75,470 points.

Democrats Trash Trump Judicial Nominee Wendy Vitter Over Her Pro-Life Views Democrats Trash Trump Judicial Nominee Wendy Vitter Over Her Pro-Life Views She said Vitter urged "the audience to distribute these materials", and called them "facts". "I would follow Roe v. Wade because that is the law of the Supreme Court and I would be bound to follow that law". " Brown v.

Dublin lord mayor beats Israel ban due to 'spelling error' Dublin lord mayor beats Israel ban due to 'spelling error' The Lord Mayor said he brought a message of support from Dublin for the need for inclusivity, a negotiated settlement and dialogue.

UK's Theresa May says Syria chemical weapons can't go unchallenged UK's Theresa May says Syria chemical weapons can't go unchallenged Trump is considering his military options in Syria after Saturday's alleged chemical attack against the rebel-held town of Douma. United Kingdom opposition leaders have demanded a parliamentary vote before any new military action in Syria is taken.

Chemical weapons watchdog investigates incident in Douma Chemical weapons watchdog investigates incident in Douma Although the agency said it was likely "an American aggression", USA officials said the US had not launched airstrikes on Syria . Trump said, "If it's Russian Federation , if it's Syria , if it's Iran, if it's all of them together, we'll figure it out".