Samsung To Push Monthly Over-the-Air Security Updates For Android
wiredmikey writes: Smartphone maker Samsung said on Wednesday that it soon will implement a new Android security update process that fast tracks mobile security patches over the air when security vulnerabilities are uncovered. The South Korea-based maker of popular Android smartphones said that it recently fast tracked security updates to its Galaxy devices in response to the recent Android "Stagefright" vulnerabilities uncovered late last month by security firm Zimperium. News of the initiative is great for Android users. For years, wireless carriers and phone manufacturers have been accused of putting profits over protection and dragging their feet on regular operating system updates, making Android users vulnerable to malware and other attacks. Nexus is also joining the monthly OTA update club.
Promises, promises, promises...
I'm curious how they'll "encourage" users to upgrade to the latest shiny if the slightly tarnished shiny is still up-to-date...
Has software ever "just worked"?
Somewhat. My Sun workstation ran for years with no software updates. It had bugs, but nothing that required a new operating system or application software.
The big difference was that it was behind a firewall and a 19.2k modem, so there wasn't much anyone could do to attack the--probably numerous--security holes.
Samsung can make all of the updates they want, but if Verizon and other companies just sit on them, it won't do us much good.
And I bet even that firewall and modem had bugs that exposed more of an attack surface than you ever wanted it to.
Systems don't "stop running" without updates. They stop being secure. And now that systems are all online, all the time, it's more important to be secure than almost anything else.