4 ms·
Well, Google are themselves the vendor here. Also seems it's fixed and this might encourage manufacturers to push out an update.
by beojan 7y ago
Well, Google are themselves the vendor here. Also seems it's fixed and this might encourage manufacturers to push out an update.
- mehrdadn 7y agoRight, I realize they're the vendors, but isn't this just going to make even more people exploit the vulnerability before consumers get patches? Like actual hackers targeting random people in the wild, not merely law enforcement?
- simion314 7y agoIt may depend who are targeted by this exploits, if the targets are politicians and people with high positions is better to make it public and have this people not use their phones.
- xvector 7y agoI feel like this goes against responsible disclosure. Google should give the manufacturers a month to push updates themselves, just like Google would expect a month to fix an issue someone reported to them.
- jdm2212 7y agoIt's being actively exploited, which changes the calculus.
- mehrdadn 7y ago"Actively exploited" by... law enforcement? Do all consumers really need to freak out about this the same way they would if hackers had access? Doesn't that detail change the calculus here?
- infinityplus1 7y agoNot all law enforcements are working for the good of their people, probably.
- mehrdadn 7y agoThat still doesn't counter my point.
- msbarnett 7y ago> "Actively exploited" by... law enforcement "Actively exploited" by at least law enforcement. It’s sheer folly to presume that if one motivated group has already discovered this that nonetheless somehow others won’t have as well.
- beojan 7y agoThe manufacturers don't need to fix anything though, they just need to push out the update. The entity that needs to fix (and has fixed) the bug is Google itself.
- eternalny1 7y agoI just received an system update notification on my Galaxy S9. I can't help but wonder if it is related to this news.