3 ms·

interesting that they highlighted how ecosystem fragmentation makes patching more difficult; they didn't highlight how fragmentation makes exploitation of their

• thecosas 10y ago
  As a layperson, I read the report that the exploit could apply broadly (since it's the baseband), but the patches were potentially difficult to roll out because of the layers of fragmentation in approving and pushing out the patches to the baseband firmware and the various mechanisms which might or might not be in pace to do so.
  • wepple 10y ago
    They all look like kernel code/driver bugs to me, meaning there will likely be memory layout and config variations much more significant that you'd see in baseband code which might be a lot more duplicated across devices.
    • thecosas 10y ago
      I think I get it more based on your explanation. Essentially, because the potential exploits rely on a larger variety of configurations, it's unlikely that any widespread exploits would take place; the work just wouldn't be worth it. More likely that they would focus on the largest subset, hence leading to security through variety.