4 ms·

One difference with security implications is that Apple makes both the hardware and the software. So the hardware is controlled by Apple and can authenticate t

One difference with security implications is that Apple makes both the hardware and the software. So the hardware is controlled by Apple and can authenticate the software, across the full stack, including the fingerprint sensor (this is why third parties who replaced the fingerprint sensor were running into problems awhile back.) This ensures all software run on the phone is uncompromised. For android, the software is modified by the carrier, and while their intentions are likely good, their ability to integrate the security patches with their custom changes is open for debate (carriers are not the best software developers.) Further, there are more opportunities for compromising the software that is run- more surface area to attack, including installing malware in the supply chain.

pjmlp 9y ago
Google already makes a bunch of requirements to access the Play Store services on their contracts with OEMS and carriers, requiring a certain level of updates to access those services is just another legal clause and validation when devices talk to Google servers.
zanny 9y ago
Except the Windows world shows it isn't a technical hurdle either. Microsoft makes their OS, OEMs buy copies of it, and stuff bloatware and crap and change stuff all the same as Android vendors before selling it to consumers. But then, despite modifications, Microsoft updates their stuff, including the kernel. It doesn't actually even take hardware vendors being ethical and making open source mainline kernel drivers for their parts. They could just be shipping DKMS kernel modules instead of baking their trash into fixed kernel releases. But they simply do not, because they don't care.
- bitmapbrother 9y ago
  You're missing the part where these Android OEM fork the OS, add all of their source code modifications, compile, link and the build it. Google cannot update an OS created by another OEM because unlike Microsoft, which provides these OEM's binaries of their OS, Google simply provides the source to Android.

pjmlp 9y ago

Google already makes a bunch of requirements to access the Play Store services on their contracts with OEMS and carriers, requiring a certain level of updates to access those services is just another legal clause and validation when devices talk to Google servers.

zanny 9y ago

Except the Windows world shows it isn't a technical hurdle either. Microsoft makes their OS, OEMs buy copies of it, and stuff bloatware and crap and change stuff all the same as Android vendors before selling it to consumers. But then, despite modifications, Microsoft updates their stuff, including the kernel. It doesn't actually even take hardware vendors being ethical and making open source mainline kernel drivers for their parts. They could just be shipping DKMS kernel modules instead of baking their trash into fixed kernel releases. But they simply do not, because they don't care.

bitmapbrother 9y ago
You're missing the part where these Android OEM fork the OS, add all of their source code modifications, compile, link and the build it. Google cannot update an OS created by another OEM because unlike Microsoft, which provides these OEM's binaries of their OS, Google simply provides the source to Android.