My first thought was that it must be Apple. But the article says, > In August 2017, U.S. Company Two updated the operating system for its smartphones and othe

My first thought was that it must be Apple. But the article says, > In August 2017, U.S. Company Two updated the operating system for its smartphones and other mobile devices, limiting KARMA 2’s functionality. I didn't find any meaningful security updates by Apple in August 2017: https://support.apple.com/en-us/HT201222 https://support.apple.com/en-us/HT201222 The only one listed on that page was about using HTTP to send analytics data, which I don't think is the one that disabled KARMA 2. Then I looked at Google. There are multiple RCE vulns with severity Critical during these two months: https://source.android.com/security/bulletin/2016-09-01 https://source.android.com/security/bulletin/2016-09-01 and https://source.android.com/security/bulletin/2017-08-01 https://source.android.com/security/bulletin/2017-08-01