3 ms·
How are Googles security practices contributing to human rights violations im China?
by sidibe 7y ago
How are Googles security practices contributing to human rights violations im China?
- geofft 7y agohttps://googleprojectzero.blogspot.com/2019/11/bad-binder-android-in-wild-exploit.html https://googleprojectzero.blogspot.com/2019/11/bad-binder-an... I think I mixed up things in my head, sorry - I don't think there's a claim of that exploit being used in China in particular. (I was probably confusing it with https://googleprojectzero.blogspot.com/2019/08/a-very-deep-dive-into-ios-exploit.html https://googleprojectzero.blogspot.com/2019/08/a-very-deep-d... / https://techcrunch.com/2019/08/31/china-google-iphone-uyghur/ https://techcrunch.com/2019/08/31/china-google-iphone-uyghur... , which is about iOS, in fact - but IMO there's a big difference between new bugs being discovered and "CVE-2019-2215 permits attackers to fully compromise a device with only untrusted app access or a browser renderer exploit and despite the patch being available in the upstream Linux kernel, it was left unpatched in Android devices for almost 2 years." I don't think either Apple or Google is doing an adequate job here at all, but Apple still seems to be a bit better, between the options.)