Slashdot Mirror


Slashdot Asks: Would You Pay For Android Updates? (theverge.com)

It's no secret that most Android OEMs could do better when it comes to seeding out updates for their existing devices. A report on Bloomberg earlier this week claimed that Google plans to publicly name and shame the OEMs who are too slow at updating their devices. An HTC executive who didn't want to be identified told Slashdot on Thursday that it is not the right way to approach the problem. But that's only one part of the problem. The other issue is that almost every Android OEM partner -- including Google itself -- only provides support to their devices for 18-24 months. Vlad Savov of The Verge in a column today urges Android OEMs to perhaps charge its users if that is what it takes for them to offer support to their devices for a longer period of time and in a timely manner. He writes: I've been one of the many people dissatisfied with the state of Android software updates, however I can't in good conscience direct my wrath at the people manufacturing the devices. Price and spec competition is so intense right now that there's literally no option to disengage: everyone's been sucked into the whirlpool of razor-thin profit margins, and nobody can afford the luxury of dedicating too many resources to after-sales care. The question that's been bugging me lately is, if we value Android updates as highly as we say we do, why don't we pay for them? The situation can't be fixed by manufacturers -- most of them are barely breaking even -- or by Google, which is doing its best to improve things but ultimately relies on carriers and device makers to get the job done. Carriers will most certainly not be the solution, given how they presently constitute most of the problem (just ask AT&T Galaxy S6 owners) -- so like it or not, the best chance for substantial change comes from us, the users. What I'm proposing is a simple crowdfunding operation. I'm skeptical about this, because I don't think it is in an OEM's best interest to serve its existing users for long -- how else they will convince customers to purchase their new devices? A newer software version is after all one of the ultimate selling points of a new phone. So I don't think an OEM will take up on such an offer. What do you folks think?

257 comments

  1. No by Dins · · Score: 2, Insightful

    Considering I actively try to avoid the free ones, probably not.

    1. Re:No by Tough+Love · · Score: 4, Insightful

      Even when it means running with known security holes, widely exploited?

      --
      When all you have is a hammer, every problem starts to look like a thumb.
    2. Re:No by Anonymous Coward · · Score: 1

      I think he meant, he's not taking "free" phones from providers, but buys them at full retail price. For ~500$ for a Smartphone we can damn well DEMAND the manufactor to stop playing games, and just fix their shit.

    3. Re:No by fustakrakich · · Score: 1

      Not if it costs money. I'll just backup more often. This is a scam to create a new profit opportunity in a saturated captive market.

      --
      “He’s not deformed, he’s just drunk!”
    4. Re:No by Anonymous Coward · · Score: 1

      Even when it means running with known security holes, widely exploited?

      The only thing I get from updating apps on my Android phone is more ads.

    5. Re:No by MobSwatter · · Score: 1

      I suppose it would depend on who is asking, if the question is being posed from the carriers then forget it. This will turn out just like the California lottery and it's supposed use upon acceptance to fund education, ROMs from XDA are just fine. More to it though, I've recently shed my tracking device commonly known as a cell phone, all the scam artists texts and blind sales dialers they don't even bother to try and stop anymore and with the economy in the shitter all that is just increasing in frequency. Cell phones have become more of an annoyance than a useful tool now days, shedding it wasn't a hard choice and it kind of makes one chuckle a bit knowing that I'm not paying a bill mainly for someone else to annoy me.

    6. Re:No by barc0001 · · Score: 2

      If you're not going to give me free security updates to the device I bought from you, I'll take the money you're asking for those updates and consider it as a discount on the product I'll buy from your competitor to replace your insecure device.

    7. Re:No by greenfruitsalad · · Score: 1

      after those 18-24 months of support, how about AOSP roms? or at least they should give us a way to create and install them easily (unlock bootloader and open drivers or update kernel with their blobs). but nooooo. let's outdate the OS, make the battery non-replaceable and make it lose capacity after 150 charges.

      somebody think of the children! (and the pollution we leave behind for them to die in)

    8. Re:No by Anonymous Coward · · Score: 0

      I think he means, he does not take free updates that are distributed because, regardless of the security fixes, he doesn't want the extra spyware, DRM, sloth, and functionality loss that seems to come with the all-or-nothing updates

    9. Re:No by tepples · · Score: 1

      For how many years after purchase ought a manufacturer to be required to make security updates available? Case in point: Windows XP no longer receives security updates, and security updates for Windows Vista will terminate in April of next year..

    10. Re:No by barc0001 · · Score: 1

      I think as long as it's reasonable to assume the device is still in modest use, it should be updated. For a phone, 4-5 years would be a good benchmark. For example, Ice Cream Sandwich is almost 5 years old and not many devices use it any longer, so security updates by manufacturers should be expected to drop off at that 5 year mark. Any device using Gingerbread or Honeycomb should not expect updates at this point. And Jellybeaners should get support until next year sometime.

  2. No way by Anonymous Coward · · Score: 0

    I will not. better to write a clone of ubuntu .

    1. Re:No way by ChunderDownunder · · Score: 1

      Ubuntu *do* have their own Linux distro for phones.

    2. Re:No way by Anonymous Coward · · Score: 0

      Does they?

  3. Umm no. by MobileTatsu-NJG · · Score: 5, Insightful

    Even Microsoft can make an OS that doesn't require the manufacturer's blessing to install updates. Google needs to fix the OS, not the OEMS.

    --

    "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    1. Re:Umm no. by Anonymous Coward · · Score: 0

      I agree and manufactures need to stick to more compatible hardware and carriers need to stop locking them down. Most people don't really care about updates and are just going to get a new phone every 2 years anyway, but just need to give those who care a phone they can maintain themselves.

    2. Re:Umm no. by LichtSpektren · · Score: 2

      Even Microsoft can make an OS that doesn't require the manufacturer's blessing to install updates. Google needs to fix the OS, not the OEMS.

      Disagree. I don't trust Google to reliably test every single Android device on the market and send out updates that don't brick any of them. The carriers and manufacturers need to be held criminally liable for (1) not patching devices that have been for sale for under two years and (2) withholding any security updates for marketing reasons.

    3. Re:Umm no. by Wintermute__ · · Score: 1

      Even Microsoft can make an OS that doesn't require the manufacturer's blessing to install updates. Google needs to fix the OS, not the OEMS.

      Disagree. I don't trust Google to reliably test every single Android device on the market and send out updates that don't brick any of them. The carriers and manufacturers need to be held criminally liable for (1) not patching devices that have been for sale for under two years and (2) withholding any security updates for marketing reasons.

      While I agree with your sentiment, good luck proving number (2), and for (1), they'll claim "technical difficulties", "we're working on it".

    4. Re:Umm no. by chr1st1anSoldier · · Score: 1

      Even Microsoft can make an OS that doesn't require the manufacturer's blessing to install updates. Google needs to fix the OS, not the OEMS.

      Disagree. An example: Windows Mobile 10 was "finalized" months ago, but manufacture BLU is still struggling to release a Windows 10 rom for their Win HD device. It's unfinished and buggy as hell.

    5. Re:Umm no. by houstonbofh · · Score: 1

      Even Microsoft can make an OS that doesn't require the manufacturer's blessing to install updates. Google needs to fix the OS, not the OEMS.

      Google (or Microsoft) makes the OS, but HTC (or Gigabite) makes the drivers for the hardware. No drivers, no update. Ask some Windows 10 "upgrade" victims about that. (And Arm hardware is even less standardized then PC hardware!)

      FYI, you can download and install the latest Android any time. Just be ready to loose some functionality as the hardware has no drivers.

    6. Re:Umm no. by shawn2772 · · Score: 5, Informative

      Even Microsoft can make an OS that doesn't require the manufacturer's blessing to install updates. Google needs to fix the OS, not the OEMS.

      (Google Android engineer here)

      I wish that were possible. The fact is that the same thing that makes the Android ecosystem so powerful -- the fact that it *is* an ecosystem, based on open source code -- means that OEMs can heavily customize Android on their devices, and Google has little control over what they do. Google can't safely update devices running code to which it doesn't even have source, even if there weren't other technical and business obstacles. Google's only real lever is the Play store, which is what motivates OEMs to care about passing the compliance test suite, but even that can't be pushed too hard or OEMs will simply set up their own. Maybe in alliance with Amazon, who already has one.

      IMO, though, users paying for updates is the wrong answer. The right answer is for OEMs to be pushed into publishing formal support policies, as Google has done for Nexus devices, and for users to consider those policies and be willing to pay a little more for devices with better support. I'm willing to pay a little more for a car with a better warranty, for example.

      That said, if the market likes the idea of paid updates (which I doubt), that's cool. Maybe OEMs can give their code to third parties who sell "extended update policies" for users who wish to buy them. A one-time fee or subscription might be more palatable than paying for each update.

    7. Re:Umm no. by thegarbz · · Score: 2

      Even Microsoft ...

      Okay stop right there. Are you proposing that the vendor of the most popular mobile OS adopts a similar model to probably the most miserable failure in the entire history of mobile OSes?

      I think you need your morning coffee.

    8. Re:Umm no. by geek · · Score: 4, Insightful

      Not buying it. Google already places restrictions on them if they want to include Google Play services. That is your leverage. Use it. Force them to submit drivers to AOSP or no Google Play Services.

      Google made this bed. You don't get to then pass the buck and blame OEMs who already have to play by your rules. The Android ecosystem is a fucking disgrace to modern engineering.

    9. Re:Umm no. by geek · · Score: 1

      Even Microsoft ...

      Okay stop right there. Are you proposing that the vendor of the most popular mobile OS adopts a similar model to probably the most miserable failure in the entire history of mobile OSes?

      I think you need your morning coffee.

      And yet that miserable failure did a better job of pushing out security and OS updates than Google ever has.

    10. Re:Umm no. by Overzeetop · · Score: 1

      Why is Google's OS so broken that it can't run on "compatible" hardware. I know that Microsoft sucks (TM), but it's a rare device that simply *won't work* when they send out a patch or upgrade. Even W10 - the pariah that it is here - installs perfectly fine on 8 year old hardware that was designed to run an OS 4 generations back.

      --
      Is it just my observation, or are there way too many stupid people in the world?
    11. Re:Umm no. by Anonymous Coward · · Score: 0

      Waaaahhhhbulllaaaannnnccceeeeee. You have brain, you use brain. Product A no good, buy product B.

    12. Re:Umm no. by whoever57 · · Score: 1

      And yet that miserable failure did a better job of pushing out security and OS updates than Google ever has.

      It's a lot easier when there are only about 5 models of phone that run your OS.

      --
      The real "Libtards" are the Libertarians!
    13. Re:Umm no. by RatherBeAnonymous · · Score: 1

      I agree this is a disgrace, and it is a failure of vision and direction from management. Google should decree that devices take updates as Google publishes them, or else it is not an "Android" phone, and they can't be sold using the Android trade marks and marketing materials.

      The other way Google is failing in not securing their installed system base. I'm not talking about new versions. There should be 5 years minimum of security patches for major versions. There is no excuse for Nexus devices being fully patched and riddled with holes.

    14. Re:Umm no. by Tran · · Score: 1

      Not sure what you are talking about in terms of Nexus... I still get updates and have latest version on my Nexus4

    15. Re:Umm no. by liquidsin · · Score: 0

      Google can only do so much. "Android" is an open-source project and OEMs build their own binaries to ship. Think of it like linux: if you're running linux, you're (likely) running one of a handful of distros; maybe it's debian. So there's a vuln found in the linux kernel and the kernel maintainers patch it. But you'll need to wait for the debian maintainers to push out their own version of the patched kernel, and if they don't do that in a timely manner then that certainly doesn't reflect back on the kernel maintainers. Same situation here - Samsung, LG, et al will build their own Android "distros" to install on their devices, so when there's an patch/update/upgrade each vendor has to build a new version with those fixes and push it out to their customers. Google has no control over that. And unless Google tries to release Android under a license with terms forcing OEMs to keep their systems updated for X years after release, I'm not sure there's anything Google could actually do about this problem.

      --
      do not read this line twice.
    16. Re:Umm no. by MobyDisk · · Score: 0

      means that OEMs can heavily customize Android on their devices, and Google has little control over what they do. Google can't safely update devices running code to which it doesn't even have source,

      OEMs heavily customize Windows on their desktops too, and Microsoft has little control over what they do. Yet Microsoft can safely update devices running code to which it doesn't have the source.

    17. Re: Umm no. by Voyager529 · · Score: 1

      Even MicrosoftÂ...

      Okay stop right there. Are you proposing that the vendor of the most popular mobile OS adopts a similar model to probably the most miserable failure in the entire history of mobile OSes?

      No, I think he's saying that the vendor of the most popular mobile OS adopts a similar model to the most successful desktop OS. For all the criticism Windows gets (not undeservedly so), it is highly irregular for an update to botch things, And *everyone* gets updates unless they opt out of them.
      Furthermore, OS patches and UI lobotomies are different animals under most circumstances.

      So yes, even Microsoft.

    18. Re:Umm no. by thegarbz · · Score: 1

      Even Microsoft ...

      Okay stop right there. Are you proposing that the vendor of the most popular mobile OS adopts a similar model to probably the most miserable failure in the entire history of mobile OSes?

      I think you need your morning coffee.

      And yet that miserable failure did a better job of pushing out security and OS updates than Google ever has.

      I updated the OS on my Raspberry Pi the other day. Maybe I should tell Google?

      Microsoft have been largely ignored by carriers. Carriers don't give a shit for a device which barely sells. It's too much effort to shovel crapware onto them so what's the point in controlling that portion of the market. On the other side of the restrictions that Android face Microsoft efforts have been like Apple's only even easier with even less hardware that THEY control.

      When Microsoft even comes within 10% of the breath of installation as Android, and provide updates, then we can pat them on back and and say "attaboy".

    19. Re:Umm no. by Anonymous Coward · · Score: 0

      So you consider having Google gate off their software to only work with certain functions on hardware? I do think that will help the overall market for better standardization of the hardware and make updating them easier for the android team. I don't think that they'd want to take the usage hit, so they'd have to split their OS into a vendor open version and a more closed (hardware-wise) version that they could update with minimal risk.

      I do think they could sell the hardware version by saying they can produce safer products that they can use as a marketing point and offloading the cost of maintaining the software to just likely slightly more expensive hardware.

      I do wish I understood what causes this problem. Was I wrong to assume that it'd work in all cases on what I thought was an x86 system? Is it just a driver issue?

    20. Re:Umm no. by Anonymous Coward · · Score: 0

      how many new nexus does google support each year? a couple?
      someone like Samsung may release the same amount of devices in a couple of years than all the google nexus releases in existence

      That makes it time consuming to support all the older devices in addition of all the newer devices as well as unattractive since manufacturers want to sell the newer releases and not spend money and time on older ones that don't generate revenue
      Ill love if they could found a straight or easier solution or a fair compromise but it is not a simple problem

    21. Re:Umm no. by MobileTatsu-NJG · · Score: 1

      I have computers from 2010 that can run Windows 10z. I have a Galaxy Tab from 2011 that couldn't be updated past Ice Cream Sammich. So yes, after my coffee, I still believe Microsoft has set a better example.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    22. Re:Umm no. by Anonymous Coward · · Score: 0

      Yea, I'm sure Google forcing OEMs to abide by strict OS limits will not bring down even more troubles from the EU and potentially even the US.

      The play store isn't the leverage it may have once been and they need to be careful how much they push it.

    23. Re:Umm no. by Anonymous Coward · · Score: 0

      I have a question, then. And I hope you are reading the replies so you can answer, because I'm somewhat curious.

      How do you expect people to pay for updates when those updates manage to UNDO things like rooting that allow the user to actually control what their device does? Since, being technically savvy, these are the people who are most likely to root their device, and they will not take kindly to Google essentially wrenching control back from them on hardware that they own in the name of "security."

      It also doesn't help that on all the devices I have owned, there was some very serious downside to upgrading (the phone becoming little more than a rapidly-overheating, battery-sucking brick comes to mind for at least one of them, and that was a very expensive one).

    24. Re:Umm no. by Anonymous Coward · · Score: 0

      Why do the updates have to come from the manufacturer. Rooting your phone and installing android from a community built update works great. Although it takes some technical competency. That part could be streamlined.

      Part of that streamlining could come from google requiring phone manufacturers to only deploy on phones with unlocked bootloaders. I have a samsung galaxy note 4. Verizon made samsung do this. So I have to live with the crap that Samsung force installs onto my phone. Like an app that allows me to scan all of my customer loyalty cards into. Advertised as a convenience tool. My tin foil hat says they are selling my shopping habits.

    25. Re:Umm no. by shawn2772 · · Score: 2

      means that OEMs can heavily customize Android on their devices, and Google has little control over what they do. Google can't safely update devices running code to which it doesn't even have source,

      OEMs heavily customize Windows on their desktops too

      No, they don't. They install some apps. They have no access to the source code and can't make deep changes.

    26. Re:Umm no. by Threni · · Score: 1

      > (Google Android engineer here)

      Can you please explain why a fix for Stagefright couldn't be rolled out directory to users devices? Does the upgrade process (ie Google Play, or anything else Google can deploy for this sort of thing) not allow the upgrade of that type of component? Was it considered likely to cause problems when upgraded? It would seem that the relevant library was something which was very unlikely to have been customized in any way by a manufacturer.

      Could Google consider dividing components into stuff which Google *will* upgrade at will and stuff it won't, minimizing the stuff manufacturers are responsible for?

      And why both making the claim in public that manufacturers must support all major versions of Android released within 18 months of the launch date of the phone/tablet and then not enforce that when Samsung consistantly totally fails to comply? Is it part of a contract Google can enforce or not?

    27. Re:Umm no. by shawn2772 · · Score: 1

      > (Google Android engineer here)

      Can you please explain why a fix for Stagefright couldn't be rolled out directory to users devices?

      Mediaserver, the component with the stagefright bugs, is a core OS component, part of the system image. The only way to upgrade it is to install a new system image.

      The only things that can be updated via Google Play are apps, though the Android team has pulled some bits out that used to be part of the core OS and begin managing them as apps. For example, WebView.

      It would seem that the relevant library was something which was very unlikely to have been customized in any way by a manufacturer.

      Could Google consider dividing components into stuff which Google *will* upgrade at will and stuff it won't, minimizing the stuff manufacturers are responsible for?

      Manufacturers make all sorts of changes, including deep in the system. I don't know if anyone has modified mediaserver, but I'd actually be surprised if no one has.

      And why both making the claim in public that manufacturers must support all major versions of Android released within 18 months of the launch date of the phone/tablet and then not enforce that when Samsung consistantly totally fails to comply? Is it part of a contract Google can enforce or not?

      I don't think there was any such claim, and I don't think Google can enforce it.

    28. Re:Umm no. by shawn2772 · · Score: 1

      Not buying it. Google already places restrictions on them if they want to include Google Play services.

      Compatibility requirements, yes, but that's it.

      That is your leverage. Use it. Force them to submit drivers to AOSP or no Google Play Services.

      So they'll just ally with Amazon, or set up their own consortium app store. It's not really that hard to replace what Google provides.

    29. Re:Umm no. by billcopc · · Score: 1

      OEMs can heavily customize Android on their devices

      Okay, so why can't they release those customizations as packages that install on top of the standard Android OS ? Why can't Google put out an official "blessed" kernel and base system, and then the OEMs load their themes, custom launchers or whatever else they think defines their brand ? That blasted Samsung browser is an app like any other.

      It's Linux and Java: two things that are extremely modular by design. Two things that already excel at combining executable code from dozens if not hundreds of different people, and adapting to wildly divergent environments. I develop friggin' appliances for a living so I'm not about to buy into the idea that a company a million times larger than mine can't figure out how to create a DEB or RPM or JAR or whatever the heck. Nevermind that it frees up the resources they're currently spending on rebuilding and revalidating the core OS with each update.

      --
      -Billco, Fnarg.com
    30. Re:Umm no. by turbidostato · · Score: 1

      "There should be 5 years minimum of security patches for major versions."

      There should be a warranty that security patches will come *forever* or, at the very least, for as long as Google stays in business. Fixing bugs is not "life cycle": the bugs didn't magically appear five years down the road due to bit rotting, they were there just from the begining. You delivered a broken product, you fix it. Oh! but that would be an unbearable burden! you say. Only if it was and utterly broken product to start with. For a software with no bugs it would take you exactly zero resources to fix them 50 years down the road.

    31. Re:Umm no. by shawn2772 · · Score: 1

      OEMs can heavily customize Android on their devices

      Okay, so why can't they release those customizations as packages that install on top of the standard Android OS ?

      They could if they wanted to.

    32. Re:Umm no. by RatherBeAnonymous · · Score: 1

      Google's official policy is below. They commit to 3 years after the first day of sales or 18 months after the last day of sales on the Play store. My Nexus one stopped getting updates around 2 years after I bought it. I call shenanigans that you have Android 6.0.1 (Marshmallow), unless you flashed it manually.

      Nexus devices

      Nexus devices get the latest version of Android directly from Google. These devices will receive Android version updates for at least two years from when the device first became available on the Google Store. Nexus devices will also receive updates for security issues documented in our Public Nexus Security Bulletins for at least the following periods:

              Three years from when the device first became available on the Google Store
              Or, 18 months after the device stopped being sold on the Google Store

    33. Re:Umm no. by Tran · · Score: 1

      I stand corrected.
      I had to check - but you are correct.. My Nexus 4 is only at 5.1.1
      For some reason I thought I had gotten a system update several months ago and I was on the latest version.
      Perhaps the system update was something else.

    34. Re:Umm no. by MobyDisk · · Score: 1

      If the OEMs can't make the changes they want by installing apps using the exposed APIs, the the OS is not designed well-enough to meet their needs. Vendors can do just about anything on Windows using the exposed APIs.

      I'll use my Samsung Galaxy S5 as an example. It has customized icons, and some custom touch-screen features ("air gestures" and "air view") and a fingerprint scanner. It has a custom lock screen, and some custom items in the control panel. It has a custom power saving mode. It has noise reduction on the microphone. On Windows, none of these things would require modifying the core OS. There are exposed APIs for nearly everything.

      I presume Android inherits this limitation from Linux. In Linux, there aren't stable APIs for drivers, so the drivers are either kernel modules, or code that interacts with kernel modules that act as shims. I don't know: is it the same way in Android? Are the vendors are making kernel modules to do this stuff? If so, rather than blame the vendors for not providing updates, perhaps Google should make the OS modular enough that the vendors aren't forced to do that.

  4. The problem is cost and complexity by mveloso · · Score: 3, Insightful

    QA takes money, and Android devices are sold with basically no margin. How are you going to pay for that team?

    Answer: you aren't.

    Apple's QA team has enough problems with its limited set of updates and devices, and Apple has a huge pile of money and presumably decent processes. Any android manufacturer would find it impossible to handle multiple update streams on multiple hardware platforms.

    1. Re:The problem is cost and complexity by SQLGuru · · Score: 3, Insightful

      I think the model that Apple has taken --- limited phone models --- is the solution, but that requires a much bigger bet by the device manufacturers. With fewer models to support, a manufacturer could devote more resources to keeping the phone updated. The risk being that a poor model would crater their whole business. I know not every model is perfect for every person......so I don't really know how that would work, either.

    2. Re:The problem is cost and complexity by blackomegax · · Score: 1

      Then they should reduce the number of platforms and start upstreaming their driver code into the base kernel.

    3. Re:The problem is cost and complexity by Luthair · · Score: 1

      I think the idea that the manufacturers want a large variety of phones is incorrect, the issue is that carriers around the world push them into it. Much like Walmart etc push TV manufacturers into weird variants.

    4. Re:The problem is cost and complexity by Anonymous Coward · · Score: 0

      I think the idea is that you could purchase an OS upgade package. The package would be a high margin add on they could sell next next to their phone repair package.

    5. Re:The problem is cost and complexity by CanadianMacFan · · Score: 1

      The problem Apple has is it's fixed release schedule which is tied to hardware releases. Every summer it announces a new version of iOS and Mac OS X along with new iPhones. The iPhones are fairly easily handled on a yearly schedule. However the software is a race to the finish every year which gives QA little time to do their work. The issue is that they are trying to cram in every new feature into the yearly release in addition to support for the new hardware features.

      I think it would be better if Apple put out a point release with the hardware support when they bring out their new iPhones and then when the new features are ready release the new version of the operating systems. Or at least release the OSs later on, say in November in time for the Christmas rush. It would take some of the pressure because the release date of the iPhone is a hard date. There is no pushing that day further back because a new feature on iOS isn't ready. By making the new OS features separate those changes can be properly QA'd and the OS release could be delayed a few days or a week if needed. Only the point release containing the new hardware support would be critically needed on the day the phones launched.

    6. Re:The problem is cost and complexity by thegarbz · · Score: 0

      I think the model that Apple has taken --- limited phone models --- is the solution

      The solution to what problem? Apple and Samsung (for example) are at a battle for phone sales when you consider the iPhone vs the Galaxy. But Apple is being absolutely shat on when you consider just phone sales Apple vs Samsung.

      Are you pitching to Samsung the glorious idea of less sales and less money? Let us know how that goes.

    7. Re:The problem is cost and complexity by Alan+Shutko · · Score: 2

      Are you pitching to Samsung the glorious idea of less sales and less money? Let us know how that goes.

      Apple sells fewer phones but has higher profits. So it might be a matter of less sales, but more money.

    8. Re:The problem is cost and complexity by SQLGuru · · Score: 1

      A solution to the problem of how long it takes for updates to make it to end-users. If you have 15 models, each with different specs, you have to work through each model to make security updates. If you only have 3 or 4 models, that's bound to be easier meaning that updates should be released faster.

    9. Re:The problem is cost and complexity by Tjp($)pjT · · Score: 1

      Not so limited as you might think. Just knows all of them. iPhone 4S is still supported with the current iOS as is the iPad 2. So iPhone 4S 5 5S 5C 6 6S 6+ and 6S+ plus iPad 2 3 Air Air2 Pro(12) Pro(9). So 14 models not counting CDMA and market variants which add more sub variations. Oh and on the iPad side, with cellular and without. So in some cases the base model could have 4 variants, or more.

      The Android problem is low margins to get market share, and no incentive for the diverse manufacturers to update beyond the peak sales repurchase cycle. And some makers are just pitiful. Amazon Fire Phone comes to mind, my Android mobile device test rig with so much promise, and next to no delivery. When updates were produced they lagged a full major Android release.

      --
      - Tjp

      I am in wallow with my inner money grubbing capitalistic pig. ... Oink!

    10. Re:The problem is cost and complexity by Anonymous Coward · · Score: 0

      Apple devices begin development years in advance. To be sure, software engineers have to work hard, but they know long in advance what's coming down the pike. Emulators and pre-production units can be used to assist. And the software doesn't have to work properly or fully on the day hardware is announced... just on the day the new device ships.

    11. Re:The problem is cost and complexity by MobyDisk · · Score: 1

      They have sorta figured this out. There seems to be a big phone release every year, rather than ever 3 months. For a while it was crazy.

    12. Re:The problem is cost and complexity by Anonymous Coward · · Score: 0

      That assuming that the phone oems owns all the hardware on the phone wich may not be the case since, comms and radio may be from one manufacturer, the camera from another.....that must release drivers and them the oem must ensure that all work together as it should be and because there are pennies on earnings for every part that require drives, those manufacturers are not going to be very fordwar into releasing drives for every older component they manufacture

      Its not only the OEMs, its also the components manufacturers

    13. Re:The problem is cost and complexity by antdude · · Score: 1

      And companies care not about QA. :(

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    14. Re:The problem is cost and complexity by tepples · · Score: 1

      Then make several out of the 15 models share almost the same hardware components. This would allow for a "generic ROM" across those models in the sense that most GNU/Linux distributions ship with a "generic kernel".

    15. Re:The problem is cost and complexity by Anonymous Coward · · Score: 0

      I wish QA teams released a public report stat on how it effects the battery life and speed of the current model and other info and when it asks you to update it shows you this report.

  5. I'll pay for a Nexus by myowntrueself · · Score: 2

    and get free updates. Thanks

    --
    In the free world the media isn't government run; the government is media run.
    1. Re:I'll pay for a Nexus by Noryungi · · Score: 4, Informative

      Only for a couple of years. Google has itself has abandoned eg. Nexus 7, which was sold two years ago. Only a fool will buy anything new again from a vendor, who has just pulled the plug from the model one has currently..

      That is totally new to me, since I own a Nexus 5 (not a Nexus 5x, mind you, the original Nexus 5) and a Nexus 7 and both were updated a couple of weeks ago to Android 6.0.1, Security patch level May 2016.

      I have noticed the updates for the Nexus 7 lag a bit behind the Nexus 5, but usually not much more than 10 days.

      Make of that what you will.

      --
      The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
    2. Re:I'll pay for a Nexus by houstonbofh · · Score: 1

      and get free updates. Thanks

      And I would pay more for a cheap China knockoff if they would guarantee 5 years of updates. I might pay double since they are so cheap! But I will not pay as I go. And I will NOT pay $600 for something that will be abandoned in 2 years.

    3. Re:I'll pay for a Nexus by sobachatina · · Score: 1

      I love my Nexus 5 and old Nexus 7.

      The Nexus 7 still got updates from Google but it became unuseably slow because of them.

      I flashed Cryogenmod on it and it runs like it is brand new again.

    4. Re:I'll pay for a Nexus by PCM2 · · Score: 1

      Similarly, I have a 1st generation Moto X -- a model that's nearly three years old -- and I was recently updated to security patch level 2016-04-01. Sure, nobody's promising me an upgrade to Marshmallow. But I hardly feel abandoned after 18 months. And by next year it will probably be time to start looking at newer models, anyway.

      --
      Breakfast served all day!
    5. Re:I'll pay for a Nexus by shawn2772 · · Score: 1

      That is totally new to me, since I own a Nexus 5 (not a Nexus 5x, mind you, the original Nexus 5) and a Nexus 7 and both were updated a couple of weeks ago to Android 6.0.1, Security patch level May 2016.

      Those devices won't get Android N (probably), but they should continue receiving security updates for a while.

    6. Re:I'll pay for a Nexus by q4Fry · · Score: 1

      I am still waiting on the announcement (one way or the other) that Android N will run on the N5. Comparing the specs, I don't think there's all that much separating it from the N5X. Same RAM. The N5X has 6 CPU cores to 4 for the N5, but a lower clock cycle.

    7. Re:I'll pay for a Nexus by Solandri · · Score: 1

      Unofficial official policy for Nexus devices is a minimum two years of major OS updates, 3 years of security updates. Since the Nexus 5 was released in Oct 2013 (I got mine Jan 2014), there is a chance it will not get the Android N update. It hasn't been included in the betas so far.

      An update policy that short would upset me in most industries. But the smartphone industry is moving so quickly right now it doesn't really bother me. I've been meaning to update to a newer phone anyway.

    8. Re:I'll pay for a Nexus by Anonymous Coward · · Score: 0

      Those devices won't get Android N

      That's pathetic. Those devices are still more capable than what the vast majority of the population needs.

    9. Re:I'll pay for a Nexus by whoever57 · · Score: 1

      My last phone (Samsung Galaxy SII) got an OTA update last October -- when the phone was 4 years old.

      --
      The real "Libtards" are the Libertarians!
    10. Re:I'll pay for a Nexus by thevirtualcat · · Score: 2

      GP is thinking of the Nexus 7 2012 model. The one without the back-facing camera. That was the one that was stopped.

      The Nexus 7 2013 model is still getting updates.

      Lest we forget that there were two tablets called "Nexus 7." For some reason.

    11. Re:I'll pay for a Nexus by Anonymous Coward · · Score: 0

      You're paying for the "free" updates with a higher price, increased tracking, and sub-par Nexus hardware.

    12. Re:I'll pay for a Nexus by AF_Cheddar_Head · · Score: 1

      Same for my 1st gen MotoG. Bought directly from Motorola (AKA Google at the time) and still receiving O/S and security updates.

    13. Re:I'll pay for a Nexus by dwywit · · Score: 1

      Sadly, my Razr HD was ONLY sold in Oz via Telstra, I think that not enough were sold here to make it worthwhile for Telstra to put the effort into more than one upgrade - JB to KK, so no more updates for me - unless, of course, I unlock and root it. Fortunately, Motorola make it easy to unlock, and there's always XDA.

      --
      They sentenced me to twenty years of boredom
  6. No. by Anonymous Coward · · Score: 0

    I'd just switch to CMOD, $_other, at that point. And if my phone wasn't supported, I'd get a phone that was.

    Next question.

  7. Long term updates aren't even the problem! by wangmaster · · Score: 5, Insightful

    "only provides support to their devices for 18-24 months"

    The problem is, in that 18-24 month period manufacturers aren't even updating their devices. Let's solve that problem first before we start talking about paying for longer term updates. And no, paying for an update while a device is still well within it's support window is not something I would do.

    1. Re:Long term updates aren't even the problem! by Anonymous Coward · · Score: 0

      Seems like a fair place to add this.

      Despite what many Slashdotters like to think, Google does not have a commanding influence on smartphones. Google has a commanding presence because it lets the carriers do whatever they want with the OS. If Google were to try to force the carriers to follow any patching standards, they'd lose their advantage over Windows Phones. Apple is the only smartphone maker with a dedicated enough buyerbase to make demands, and only AT&T is willing to put up with that.

      If Google takes the advice I see on Slashdot often and tries to force carriers to be responsible with patches, it will be the end of Android. Android phones will be put on the back shelf next to the WinPhones, and carriers will find some other OS for their flagship models. Maybe the carriers will conspire to have one unified phone OS because it's easier, or maybe they'll go back to trying to each push their own solution.

    2. Re: Long term updates aren't even the problem! by Karlt1 · · Score: 2

      Apple is the only smartphone maker with a dedicated enough buyerbase to make demands, and only AT&T is willing to put up with that.

      Every carrier worldwide - I think around 180 - "puts up with" Apple's demands with regards to updates, no bloatware, and reports are a guaranteed minimum number of phones they must sell.

    3. Re:Long term updates aren't even the problem! by Frederic54 · · Score: 2

      True, a couple years ago I bought a Samsung Galaxy Tab Pro, very powerful tablet and all, it came with KitKat 4.4 and it was never upgraded. Shame on Samsung!

      --
      "Science will win because it works." - Stephen Hawking
    4. Re:Long term updates aren't even the problem! by Anonymous Coward · · Score: 0

      I was in the exact same boat with my Tab Pro 10.1. Finally pulled the trigger on a Cyanogenmod install earlier this year and haven't regretted it for a second.

    5. Re: Long term updates aren't even the problem! by Anonymous Coward · · Score: 0

      No bloatware but their own you mean - My 6S came with several un-deleteable apps to annoy me and take waste space.

  8. CyanogenMod is free by LichtSpektren · · Score: 1

    so I wouldn't pay extra for extended security support. Besides, it's quite inhumane to ransom already-crafted security updates just to make a few extra pennies. Either don't update and clearly declare a device EOL, or update it.

  9. Unlock the device by Anonymous Coward · · Score: 0

    Android OEM partners don't need to support the devices, they just need to unlock the damn things so we can do it ourselves. There are plenty of free choices out there already. People just can't load them on their phone. They should be forced to proved free support, or unlock the device... but we know that won't happen since the citizens don't run this country anymore.

    1. Re:Unlock the device by bill_mcgonigle · · Score: 1

      Right. If anybody can unlock the bootloader on my GS4, I'll pay them real money. :)

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
  10. Probably not by rsilvergun · · Score: 1

    Since I'm much more likely to just haul off and buy a new phone unless I bought one of those $600+ flagships. In that case I'm probably expecting free updates since I just spent $600 on a phone. Even if I'm not if I buy a high end flagship I can probably count on updates for free from Cyanogen.

    Honestly Google is already giving it away for free (more or less) So paid droid updates were always a bit of a non starter.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
  11. Absolutely! by hey! · · Score: 1

    With the provisos that (a) I get to choose the apps on my phone and (b) I get to choose between competing OS providers, (c) network providers have no say whatsoever in what's on my phone. Meet those criteria I'd be very happy to pay a reasonable amount per year -- say $30-50 -- to a software company to provide service and security updates to my phone.

    --
    Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  12. It depends, but probably no by QuietLagoon · · Score: 2
    If I have to pay for updates, then any and all of the pre-installed bloated apps and tracking software must be removed from my phone. The only software on the phone should be software I choose to install.

    .
    Then, and only then, would I be willing to pay a reasonable (for me, not the money-grabbing vendor) for Android updates.

  13. pay for funktionality by Anonymous Coward · · Score: 0

    If you give that then you cant milk a dollar from every mdm license. Fyi samsung mdm license allows for example proper firewalls and bloat uninstall. Thats why the bloat uninstallers for 5 and 6 cost money. You cant make a feeware app for the same because you need the enterprise license per client to unlock selinux without tripping knox and warranty.

    1. Re:pay for funktionality by blackomegax · · Score: 1

      the fuck is this word soup

    2. Re:pay for funktionality by Anonymous Coward · · Score: 0

      Looks like a severe lack of commas. Try this.

      "If you give that [auto updates], then you cant milk a dollar from every mdm license. Fyi, samsung mdm license allows, for example, proper firewalls and bloat uninstall. Thats why the bloat uninstallers for [version?] 5 and 6 cost money. You cant make a feeware app for the same [functionality] because you need the enterprise license, per client, to unlock selinux without tripping knox and [voiding the] warranty."

      Thankfully, I'm fluent in moron.

    3. Re:pay for funktionality by Anonymous Coward · · Score: 0

      "The OS Windows. created by Microsoft, has the capacity to mandate updates regardless of the maker of the hardware upon which it is being run. Microsoft is generally regarded as less technically capable than Google, so it is puzzling that Google's mobile OS software requires phone manufacturer involvement to release updates. I suggest Google modifies Android to be more in line with the Microsoft model"

        - Some random guy.

    4. Re: pay for funktionality by Anonymous Coward · · Score: 0

      News flash, Microsofts been providing updates to customers way longer than android has. They've been patching OS's since the early 90s.

      Androids model started out as a clusterfuck,
      While apple held its ground and said fuck you, we will supply updates.

  14. Yes by Anonymous Coward · · Score: 0

    Same way we would pay to upgrade Desktop OS (Not Linux).

    What incentive for OEM to go through the effort of upgrading android when it will just elongate people using the same device. It decrease people buying hardware upgrade. Unless there is incentive OEM will not budge.

    1. Re: Yes by Anonymous Coward · · Score: 0

      When you own a copy of Windows you don't have to pay for the updates.

      You only have to pay if you are upgrading to a new version (windows Vista -> 7 -> 8)

    2. Re:Yes by Anonymous Coward · · Score: 0

      This, you have to pay for the latest version of the most used user OSes like Windows and MacOSX. So don't excpect anything to be free in life.

    3. Re:Yes by ray-auch · · Score: 1

      Same way we would pay to upgrade Desktop OS (Not Linux).

      There's upgrades and updates.

      With windows you pay (maybe, not for 7,8,x to 10, not for 8 to 8.1) for upgrades, but updates, from security updates to service packs, are free. Typically you get at least a year or two of mainstream support after last date of sale, and five years extended support (security updates are still provided free) beyond that. Same level of price and service on Android devices would be just fine thanks - can you tell me where I can find it?

    4. Re: Yes by Anonymous Coward · · Score: 0

      I haven't paid for a OS update since I bought a Mac. Windows 10 has been free for the last 11 months as well. Who pays for desktop updates?

  15. Class Action Lawsuit time by Anonymous Coward · · Score: 0

    Seems a bit 'prejudicial' to me.

    Most carriers offer immediate updates for the iCrappyOS. Failing to do so for BB and Android seems to leave them open to lawsuits.

    Rather than us paying them to get updates, how bout we make them pay us if they don't.,

    1. Re: Class Action Lawsuit time by Anonymous Coward · · Score: 0

      iOS updates come directly from Apple, not from your carrier.

  16. Oh, hell no... by __aaclcg7560 · · Score: 0, Troll

    Why would I get Android device in the first place?

    1. Re:Oh, hell no... by Anonymous Coward · · Score: 0

      You should be able to answer that question for yourself, it is a matter of preference.

  17. I already do pay for upgrades - called "phones" by xxxJonBoyxxx · · Score: 3, Insightful

    I already do pay for upgrades - they're called "new phones" in Android-world.

  18. Unlock the damn devices by Wintermute__ · · Score: 1

    And let us update them ourselves.

    What's the manufacturers rationale for keeping control of this? QA? They're not willing to dedicate the QA resources it takes to give us these updates. Open it up, and let the community take care of it, if there's a big enough community who wants to. If there's not, we're still no worse off than today.

    Cynical but probably true: they don't want to, and they don't even want those updates available. They want you to buy a new device. Gotta keep that treadmill rolling.

    1. Re:Unlock the damn devices by Anonymous Coward · · Score: 1

      Presumably you're locked because you live in the US and use subsidised pricing every two years when you "upgrade" your device.

      Here is a solution: don't buy the device from a telco, buy it clean and then use a SIM from your preferred telco.

      Wow! That's like, well kewl dude. This is how the rest of the planet operates. You want the latest to keep up with your "friends", but you don't want to pay the full price. That's where your fuck up.

      For someone with a /. ID as low as yours, you really are a thicko.

    2. Re: Unlock the damn devices by Anonymous Coward · · Score: 0

      Pretty much every major us carrier has dropped the contract subsidy in favor of awful monthly payment plans

    3. Re:Unlock the damn devices by Hognoxious · · Score: 1

      This is how the rest of the planet operates.

      That's why the rest of the planet isn't NUMBER ONE!

      [Aside: They say it looks like a cat? Nonsense, it doesn't even have a tail!]

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    4. Re:Unlock the damn devices by Anonymous Coward · · Score: 0

      Indeed. The people who are most likely to purchase updates are the ones who are savvy enough to want to be able to actually control the devices that they own. Worse yet, they are also going to be EXTREMELY PISSED if an update they paid for removes the option to root, or their existing root. There are already plenty of people who duck, dive and weave under and past any update to prevent just this result.

  19. SubjectIsSubject by p0p0 · · Score: 1

    No. I would begrudgingly pay for an unlocked bootloader to then get free updates.
    Which basically means it'll never happen.

    1. Re:SubjectIsSubject by Tough+Love · · Score: 1

      I would pay (a modest amount) for an unlocked boot loader. Otherwise, I vote with my dollars, locked boot loader is massive negative for me that has so far meant that samsung android devices are banned in my home. Right up there with missing sd slot.

      --
      When all you have is a hammer, every problem starts to look like a thumb.
  20. simple solution? by Anonymous Coward · · Score: 0

    Android is linux, so why the f*** doesn't Google just require vendors to provide a firmware shim for each device, where the shim fills in whatever code is missing from the base build of Anrdoid for the device's instruction set. With a scheme like that, you could apt-get update everything, so Google could keep everyone patched to top of branch by compiling each security update for every mobile CPU instruction set.

    Manufacturers would be required to patch firmware bugs, and they'd lose their right to use the name Android if they go more than 30 days to patch a firware root exploit.

    --

    The real reason they don't do this is because the device manufacturers and carriers want to add their own unremovable crapware. I guess the real solution is CyanogenMod?

  21. Zero by jbmartin6 · · Score: 1

    The problem used to be that an update was a full OS reload. I would not pay anything for that. I don't want them. I've had updates break Wifi, reduce my data speeds to half, take away root access, introduce pointless interface changes, gratuitously rearrange where settings and controls can be found, add unwanted applications and subscriptions to middle of the night alerts about missing kids hundreds of miles away, and more. Once I get things set up how I like, I turn off all update checks.

    Now if we are talking security patches only, that's a different story. Google has been trying to move towards this model, in part by moving up some components to use the Google store.

    --
    This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
  22. A thought I just had by LichtSpektren · · Score: 1

    It's not so much a problem that OEMs and carriers don't make/withhold security patches, but rather the fact that a buy comparing different Android devices has no idea how long the OEM/carrier intends to support it. If it were made blatantly obvious that Lenovo was only going to release a single patch for my Moto E (2014), I certainly would never have bought it to begin with!

    The only sensible solution right now is to buy a Nexus device; at least Google explicitly tells you how long your device will be supported. For everything else, you just have to guess.

    1. Re:A thought I just had by Anonymous Coward · · Score: 0

      Atleast you bought a phone that can be unlocked by its users. So unlock the thing and install CM13 (or some other andoird 6 ROM).

  23. Truth by Anonymous Coward · · Score: 0

    "I don't think it is in an OEM's best interest to serve its existing users for long"

    It's certainly not in the OEMs best interest, but it is very much in the interest of Google, the consumer and society as a whole. This is actually an interesting example of one of the ways in which capitalist / libertarian models break down.

    1. Re:Truth by iamacat · · Score: 1

      The best interest of OEMs is for existing users to have great experience with the product so that they buy the next one from the same vendor. But this does not apply to ultra cheap prepaid phones where entire goal is to sell you something once. And stupidity can certainly overcome someone's best interest.

    2. Re:Truth by Anonymous Coward · · Score: 0

      Except if you continue to have a great experience, you have little reason to buy the next one.

      This specific issue does not align with ultra cheap prepaid phones. OEMs fail to provide ongoing updates for flagship top of the range phones, just the same.

  24. cyanogenmod does the magic. by Anonymous Coward · · Score: 0

    If OEM firmware need to pay to get upgraded, I would change to cyanogenmod

  25. you know what htc made before? by gl4ss · · Score: 1

    they were an oem manufacturer for various windows phone brands.

    and got paid for firmware upgrades/users had to pay.

    (though users could just copy the updates too...)

    --
    world was created 5 seconds before this post as it is.
  26. do-release-upgrade by Anonymous Coward · · Score: 0

    The fact that you can't just type "do-release-upgrade" (or something like it) is one of the many ways that our handheld PCs totally suck compared to what we're otherwise used to. Can you even imagine a world where Dell (or your fiber/cable/DSL ISP) was expected to supply OS updates?

    But also: can you imagine a world where Dell also happened to be The Problem preventing you from being able to get updates? Normally when you decide to upgrade your OS, the hardware manufacturer has no veto power in that. It's your machine, not theirs; that's what the "buying" thing was about.

    But if the PC is small enough, suddenly everyone's expectations are different? IMHO that's fucking crazy.

    Android should come with an OS-upgrade tool, and then it should be seen as weird and hostile (i.e. possible market death, or at least a conspicuous disadvantage) for manufacturers to ship phones where they have deleted it.

  27. Sprint CEO 2014 compensation $21 million dollars by Maxo-Texas · · Score: 0

    I'm not sure of the cost of the update but... looks like they have at least $1 million to spare since that doesn't include deferred compensation like stock options. Similar compensation for other companies in this area.

    That's about 420x the average worker wage in the country btw.

    And..

    http://www.bizjournals.com/kan...
    In just less than eight months, Claure earned $22 million, the paper reports. The data come from Securities and Exchange Commission filings that the Overland Park-based wireless carrier (NYSE: S) filed ahead of its August stockholders meeting.

    --
    She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
  28. Regulation? by linuxwrangler · · Score: 1

    I'm not a big fan of over-regulation but that might be the only fix. When deemed a sufficient social good, manufacturers are required to warrant and support certain products for a minimum time. Auto emission controls are one example.

    Perhaps some congresscritter would find that the promotion of cyber security and reduction of e-waste would make requiring a 5-year support period on mobile devices a worthy regulation.

    Of course they would end up calling it something like the Security of Cyberdevices and Reduction of Electronic Waste Universally, or SCREWU act of 2016.

    --

    ~~~~~~~
    "You are not remembered for doing what is expected of you." - Atul Chitnis
  29. ... on the Internet by houghi · · Score: 1

    Just because something is on the tubes does not mean you need to handle it differently. A software update is nothing else but what a recall in the car (or any other) industry is.

    If my car has a malfunction, I get a recall, go to the garage and have it fixed. I do not need to pay for it (except in the time I spend going there).
    If my canned food MIGHT have pieces of glass in it, I can replace it for free.
    There are plenty of examples, so why would it be different just because it is a program or an app or whatever.

    I would go the other way: If there is an app that gets an update and I decide that I do not want to use it anymore, as the software does not function as expected, do I get my money back in full?

    e.g. a game has no need for access to my phone numbers and suddenly it needs that access for some reason (or network access or whatever) that means to me that the software was not functioning correctly and was broken (or they would have no need to add it later) so they sold me an apparently broken game and I should get my money back, right?

    --
    Don't fight for your country, if your country does not fight for you.
  30. Security issues, need a law to require updates by RichMan · · Score: 2

    OS updates are security issue. Users cannot really apply updates to devices so manufacturers should be required by law to support and update devices for as long as the device exists.

    Sure the manufacturer would really be better off selling you a new one. If they issued no updates you would have to buy a new device every month or three.

    Look at car recalls, the same standard should be set for support of devices. If there is a system issue and a security update is needed the manufacture should be required to provide it no matter how old the device is. Shame on them for not making is safe/secure in the first place.

    Also to avoid false fronts there should be a mandatory bond for 5 years of support should the "manufacturer" disappear. The bond price will be very low for real manufacturers.

    1. Re: Security issues, need a law to require updates by Anonymous Coward · · Score: 0

      How much are you willing to pay for a device that is supported forever? We are already paying $600 for flagship iPhones and Samsung devices. iPhones are already supported for 5 years, which seems reasonable.

      This kind of law would be asinine and pretty much make phones too expensive for most people. My phone won't kill anyone because of a bug like my car would so I think it's a reasonable trade off for more affordable devices.

    2. Re: Security issues, need a law to require updates by Luthair · · Score: 1

      Ford and other car manufacturers are largely liable indefinitely for defects with their vehicles, why should software & phones fall into another category?

    3. Re:Security issues, need a law to require updates by shawn2772 · · Score: 1

      Look at car recalls, the same standard should be set for support of devices. If there is a system issue and a security update is needed the manufacture should be required to provide it no matter how old the device is.

      That's not true of cars. Automakers are only required to provide recalls for 10 years. Sometimes they provide them for longer, especially with safety-critical issues, because it may be cheaper than dealing with a bunch of wrongful death suits, but they're legally obliged for only 10 years.

      Shame on them for not making is safe/secure in the first place.

      That's not realistic. There is no such thing as a modern computing system that is secure, and there never will be. With the exception of a very few research and aerospace, etc., systems, there never have been. Systems are just too complex, and the definition of "secure" isn't even well-defined. It changes all the time.

      I'm not opposed to the idea of legally-mandated security updates, but it should be required for a shorter period of time than it is for cars, because mobile devices cost two orders of magnitude less, and it's pretty rare that a security problem in your phone might kill you. Actually, I think a usage-based approach makes more sense -- maybe require manufacturers to provide security fixes for two years or until there are less than, say, one million units in active use, whichever is longer.

    4. Re:Security issues, need a law to require updates by Anonymous Coward · · Score: 0

      Sure the manufacturer would really be better off selling you a new one. If they issued no updates you would have to buy a new device every month or three.

      Would they? Sell you a new device?
      Certainly, they'd like to. But would you actually buy it from them, who have just let you down? Or would you rather buy it from their competitor who have a better track record with updates?

  31. Recycling fee by iamacat · · Score: 1

    Price of every device sold should include a fee to mitigate any environmental damage incurred in its manufacturing and cost of eventually recycling the components. Beyond that, I think it's up to each manufacturer to negotiate a contract with users. If I can buy an $250 device every 2 years or an $400 device every 4 years, I would probably go with the first option to enjoy latest gadget / unscratched exterior, but that's just me.

    Charging a subset of users for an upgrade seems like the worst case scenario. Full expense has to be incurred to develop the upgrade while money is only collected from a portion of customers. So prices would be high and both upgrades and non-upgrades will be unhappy with the vendor and shop elsewhere next time. But again, freedom of business model.

  32. I'm already paying for this by wstrucke · · Score: 2

    Do the telecommunications companies need yet another reason to add a fee onto my bill? Doesn't my paying for this phone line and data plan already cover the insignificant (at scale) cost of testing and releasing the android system updates when they are published? Or maybe the phone company lied to me when I bought this phone, took my money, paid bonuses and provided raises to the already wealthy and overpaid execs? Bait and switch seems to be the business model for telecommunications companies in the US. We are always sold one thing, then when it isn't delivered it's not because they didn't get tax breaks or charge an exorbitant fee for the service, but they kept the profits and now need to raise prices to deliver half of what was originally promised.

  33. I already pay for updates by FF-Loucks · · Score: 1

    I made the conscious decision to get a nexus phone so that I would get the updates. When it isn't supported anymore, I'll upgrade. So I do pay for my updates. Apple works the same way - pay more up front, get updates for quite awhile. This is kind of a moot point. If you charged people for an update, would someone be able to sue you if you didn't give them the security updates for free? I bet someone in the US would try it and even if it was thrown out, that's still a lot of extra hassle. I know what to expect when I buy a cheapo phone - nothing.

  34. I would, probably by rickb928 · · Score: 1

    My current phone is an HTC ONE M8. The nonremovable battery is past its prime, so I'm not very worried abuot getting Android N.

    Lesson Zero - removable battery. Must have.

    Lesson One - Style is not more important than substance.

    Lesson Two - RAM is king. More is better. More RAM is the enabler of future upgrades.

    So my next phone will have more RAM, removable battery, and not be too ugly. And would I pay for the extra update to a then - current Android? Yes, if it included patches, and not too expensive. Subscription? Let me tell you a story.

    Amazon would sell me a variety of items cheaper if I agreed to a subscription to buy more of a consumable item. The most recent example is a replacement cartridge for my Brain Series 7 shaver. Recommended interval is 18 months. They would give me a price break on this? Like in 3 years I would agree to buy 2 more? Really? I see the cleaning cartridges as an opportunity, but actually those last me so long I'm not ready to get on the recommended-interval-treadmill.

    Subscription is the future of consumer goods. Lock the consumer in. Sell on *your* schedule. Own the consumer.

    But for a phone, it may be inevitable that they will push a subscription to go past the 'regular' upgrade cycle. Whatever that is.

    Google, this is how you monetize Android. You're welcome.

    --
    deleting the extra space after periods so i can stay relevant, yeah.
    1. Re:I would, probably by iampiti · · Score: 1

      Sadly to few people seem to care about removable battery and the current state is atrocious: Fewer and fewer phones have removable batteries.
      A fixed battery is a form of programmed obsolescence and I don't want it.

    2. Re:I would, probably by Dixie_Flatline · · Score: 1

      How is the battery past its prime already? Quantify that. Is it, like, 10% worse, or 50% worse?

      It took about 3 years before I noticed any meaningful degradation on my iPhone 4, and in its 4th and last year, it was still barely getting through the day. My iPhone 6 is only 6 months newer than your M8, and if there's any battery degradation at all, it's not noticeable to me.

      See, the problem isn't removable vs. non-removable, it's well made phones vs. not-as-well-made phones. Why is HTC using such low-grade batteries? If the battery lasted 4 or 5 years, you'd probably be upgrading before you noticed anything wrong with the battery.

      And that M8 didn't cost that much less than an iPhone at the time.

      (My experience is mainly with iPhones, but I'm 100% sure that there are other Android handset manufacturers that don't have this battery degradation in 18 months problem. Maybe consider buying from one of them, removable battery or not.)

    3. Re: I would, probably by rickb928 · · Score: 1

      It's about 60%.

      --
      deleting the extra space after periods so i can stay relevant, yeah.
  35. Vlad Savov is an idiot. by Comboman · · Score: 4, Interesting
    Let me re-write his ramblings from The Verge for a different industry to demonstrate how ridiculous they are:

    -

    "I've been one of the many people dissatisfied with the state of auto industry recalls, however I can't in good conscience direct my wrath at the people manufacturing the devices. Price and spec competition is so intense right now that there's literally no option to disengage: everyone's been sucked into the whirlpool of razor-thin profit margins, and nobody can afford the luxury of dedicating too many resources to after-sales care. The question that's been bugging me lately is, if we value airbag recalls as highly as we say we do, why don't we pay for them? The situation can't be fixed by manufacturers -- most of them are barely breaking even -- or by Takata, which is doing its best to improve things but ultimately relies on automakers to get the job done. Dealers will most certainly not be the solution, given how they presently constitute most of the problem -- so like it or not, the best chance for substantial change comes from us, the drivers. What I'm proposing is a simple crowdfunding operation."

    --
    Support Right To Repair Legislation.
  36. Complaining about margins is bullshit by fustakrakich · · Score: 1

    They can just keep the same model in production for a longer time, and stop with the gimmickry. My 5 year old Nexus still works fine, must be a manufacturing flaw...

    No I won't pay for updates. That would be dumb. I'll just stop updating and use what I have until it breaks, making backups along the way. I'd wager most people would do the same.

    --
    “He’s not deformed, he’s just drunk!”
  37. What About the Carrier? by JenovaSynthesis · · Score: 1

    The main drag on updates isn't always the OEM though. Because Google doesn't exert the level of control that Apple does, the OEMs make the update, send it to the carrier who then fills it with bloatware and releases it at their leisure. I think it was a month in between when Samsung released Android 4.4 for my device and when AT&T finished bloating it and pushed it out.

    --
    Anonymous Cowards generally receive no replies because you're a coward and I'm a bitch :)
  38. As long as it is under contract... by Hydrian · · Score: 1

    My feeling is that as long at the phone is being sold and is possibly under contract, that OEM, needs to cover the security updates. This does not include feature / enhancement updates.

    Then once the phone is out of contract, the OEM need to provide a method to unlock the bootloader so other OS/Disto's can be loaded into the phone without bricking the phone. And by OEMs, I mean on carriers because they always add their own black software on to the phone and are the last gateway to getting an update.

    So if a carrier sells a phone, they should to provide security updates (no necessarily feature / enhancements) for 2 years once they ENDED selling that phone model. A new phone new hardware revision / model of the same marketing name starts a new clock. I know carriers release multiple versions of the same phones because of firmware / hardware issues. The Samsung Galaxy S3 was a prefect example of this. It was sold for a long time and had multiple hardware models even on the same carrier.

    --
    No good deed goes unpunished.
  39. I would if given the choice. by Anonymous Coward · · Score: 0

    Cost of getting a device that fits my requirements and isn't vulnerable to stagefright? 100€~.

    If they give me an update in the 20€ range, I'd have saved money.

  40. Paying for updates, Hell NO!!!! by Anonymous Coward · · Score: 0

    If an Android phone can cost me between $600 and $800 US dollars to purchase, why the hell would I pay for updates. I have a Samsung Galaxy Note 4 which I purchased when it was released and I'm absolutely mad at Samsung inability to get Marshmallow update out. They can blame the carriers for their predicament all the want but I personally blame Google and Samsung, they need to get their act together and provide more timely updates.

    Also, If you're an Android phone manufacturer and your profit margins are so little that you can't make money on selling phones then maybe you should think about getting out of business.

  41. Exactly right by s.petry · · Score: 2, Insightful

    I realize that the logiphobic are going to have a problem with what I'm about to write, so if you have an aversion to logic and reason just skip to the next post.

    Hopefully the kids in Hockey helmets are gone now.

    Upgrading does not fix security holes, it replaces them. I have been working in IT Security for over 30 years and I have never seen an update that magically fixes everything. I have seen plenty that fix a particular problem but expose another, and sometimes more than one. Risk mitigation is the name of the game, and not doing everything you are told can be quite productive.

    If you never connect to public wifi you don't have the same risk footprint as someone who does. If you don't use your phones web browser why do you need it patched exactly? Believe it or not, plenty of people use their smartphone as a phone and ignore the smart. Good for them by the way.

    Fear mongering works on the weak minded, but there are people who don't fit that description.

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    1. Re:Exactly right by Anonymous Coward · · Score: 0

      Although you are right in one sense, there is another in which you are wrong. An example is stagefright. That bug could be exploited by SENDING YOU A TEXT. So you want to patch even though you "ignore the smart".

    2. Re:Exactly right by Anonymous Coward · · Score: 0

      >I have seen plenty that fix a particular problem but expose another

      Well of course. You patch to protect against known exploits. The longer you wait to patch, the more people will know about that specific exploit, and the more likely you are to be targeted.

      >If you don't use your phones web browser why do you need it patched exactly

      Shared libraries. You can't be sure that the 'dumb phone' functionality that you use doesn't rely on libraries that are technically a part of (e.g.) the browser.

      Your view makes sense, but assumes a lot about the inner workings of the OS being segregated and safe. I don't think that's a fair assumption to make.

    3. Re:Exactly right by gumbi+west · · Score: 2

      I'm confused. Do you use rsh then because ssh just patches some holes and opens others?

    4. Re:Exactly right by Anonymous Coward · · Score: 0

      Yes, but with no passwords, because sending passwords via cleartext close open holes and expose others.

    5. Re:Exactly right by thegarbz · · Score: 1

      Upgrading does not fix security holes, it replaces them.

      You're right technically. Now let's add a risk review. We have replaced known and likely currently exploited security holes with unknown and likely not currently exploited holes.

      Sign me up to the upgrade! Please replace all my security holes and do it as frequently as possible. Let's keep the bad guys guessing in a cat and mouse game. It certainly gives me far more of a chance than I have now.

    6. Re:Exactly right by kuzb · · Score: 1

      Instead of telling everyone how stupid they are and how much more experience you have, perhaps you could tell them what they can do to be safer instead of telling them how hopeless it is.

      The problem with people like you is that you've become so jaded that you want everyone else to be as downtrodden and angry as you are.

      --
      BeauHD. Worst editor since kdawson.
    7. Re:Exactly right by geek · · Score: 5, Insightful

      Whoever has been paying you for 30 years should ask for their money back. You're a moron of the worst kind.

    8. Re:Exactly right by Anonymous Coward · · Score: 0

      Instead of telling everyone how stupid they are and how much more experience you have, perhaps you could tell them what they can do to be safer instead of telling them how hopeless it is.

      Did exactly that:

      If you never connect to public wifi you don't have the same risk footprint as someone who does. If you don't use your phones web browser why do you need it patched exactly? Believe it or not, plenty of people use their smartphone as a phone and ignore the smart. Good for them by the way.

    9. Re:Exactly right by Archangel+Michael · · Score: 1

      You sound like my boss, who refuses to patch anything in a timely manner, because patches might cause problems. This kind of logic ignores the fact that unpatched systems also cause problems.

      People like you do not know how to perform risk assessments properly. So, while it is possible that a patch may (and can) cause problems, there is also the risk that not patching may also cause problems. In our case, we have a system, and he never green lighted updates to a component after we updated the main system, because "something might go wong" (always undefined worst case scenario that has a 99.99% chance of not actually materializing), meanwhile those systems without the updated component are not working right (or at all).

      So, instead of proper risk assessment, and always assuming that change might cause worst case scenarios, we instead have systems in a non-functional state, which is actually worse than the undefined "worst case" that might happen (but probably won't).

      However, that is the reason he is now the PHB we make fun of, because that level of caution is what his superiors (who know nothing about IT) like. And when it all comes crashing down, I'll be safe, because I have my recommendations all in writing, along with the bosses rejection of them. As always, make sure you document everything.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
    10. Re:Exactly right by s.petry · · Score: 1

      You probably should have skipped the thread too. I never said anything close to what you are implying. How you converted my statements to be "never patch" is concerning. HINT: I never said any such thing, you internalized my comments to fit your personal dilemma with your boss.

      --

      -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    11. Re:Exactly right by Anonymous Coward · · Score: 0

      You mean like this: http://seclab.upenn.edu/sandy/movingtargets_acmccs14_340.pdf

      Disclaimer: I wasn't involved in that research but one of the co-authors was my PhD advisor.

      Basically, contrary to what s.petry rants, making changes just for the sake of change helps security.

    12. Re:Exactly right by Anonymous Coward · · Score: 0

      Amidst all this update mania that's consumed us these past few years, at least someone has their head screwed on straight.

      That said, I would also include that Android removing root - which shouldn't have to be obtained via exploit in the first place - is a very good reason to avoid the free updates by itself, let alone actively PAY for the things to remove your ability to treat your device like you actually own it instead of Google owning it.

    13. Re: Exactly right by ZeroWaiteState · · Score: 1

      For someone who has been in IT for 30 years, you don't seem to know what you're talking about. If your phone is capable of receiving calls, then your phone software security is important. This goes even if you have the Wifi radio turned off (most do not), had the Bluetooth radio turned off (most do not), and had the USB charging port stuffed with silly putty. Older feature phones were less of a problem because they were effectively useless at anything but making phone calls, so hackers were less interested in targeting them. Today it's different. You're playing the game of "I'm not important enough to hack", as though anyone running a exploit kit actually sits down and says "no I recognize that IP address and he's a loser....won't spend the 300ms it takes to crack his phone."

    14. Re:Exactly right by turbidostato · · Score: 1

      "Upgrading does not fix security holes, it replaces them."

      No, they don't.

      "I have been working in IT Security for over 30 years and I have never seen an update that magically fixes everything."

      For somebody demanding cold, logical analysis for your comment, you show a very poor level of it.

      Now, for your enlightenment: Yes, upgrading *DOES* fix security holes, while it *MAY* replace with others. The highlighted terms make your "risk mitigation game" to work in an enterily different way than the one you seem to think.

      "If you don't use your phones web browser why do you need it patched exactly?"

      Because you know one thing for certain: it closes a known security hole. It *may* open others, but the funny thing about "may" is that it works both ways: it also *may* close other unknown security holes as much as it *may* open other unknown security holes. So you end up with two "mays" pushing in different directions (it may open *and* close unknown security holes) with unknown weight *and* a "must" with known weight (it *does* close one known security hole). So, unless you stop your handwaving and offer a real reason not to upgrade, the real reason for upgrade -closing a known vulnerability, prevails.

      If you find your head spins too much, don't be surprised. As you say, you've been working on IT security for 30 years: the dismaying state or IT security after people like you working on the problem for 30 years surely means something. Maybe revealing the real level of "logic and reason" from the people involved.

    15. Re:Exactly right by Anonymous Coward · · Score: 0

      "My solution to your problem is for you to treat your $800 device like a $50 flip phone from 1998" I'm sorry, but you're a fucking idiot.

    16. Re:Exactly right by DeVilla · · Score: 1

      Hopefully the kids in Hockey helmets are gone now.

      I like you already.

      Upgrading does not fix security holes, it replaces them.

      True, it a sense. Yes, please don't get rid of you current bugs, replacing them with undiscovered new ones. A stationary target is much easier to hit.

      If you never connect to public wifi you don't have the same risk footprint as someone who does. If you don't use your phones web browser why do you need it patched exactly? Believe it or not, plenty of people use their smartphone as a phone and ignore the smart.

      Again, true. If you don't use it, it's more secure. A brick would cost less, but I'll admit it's heavier, awkward and plain unsightly. Spend a little more and get a cut bathroom tile. Secure, cheap, no maintenance, pleasant to hold and look at, just what the doctor ordered. I'm on-board with you.

    17. Re: Exactly right by Anonymous Coward · · Score: 0

      You did lead with a warning on how patching introduces new risks as it closes old ones. It's a reasonable extension to apply that logic to other systems outside of phones.

      But even staying on android. A new vulnerability is published, the ccv is there for anyone to read. Malicious actors and opportunistic malware groups look to users who don't patch so they can get a decent foothold when they then build a working version of the exploit.

      Your logic is that patching brings new risk, but these are hypothetical, and very low risk since they are neither discovered nor published. It's hard to get owned at this level. But by staying behind, you increase your risk.

      I get that you suggest avoiding untrusted Wi-Fi or ever using a browser or app that contains browser functions. But this means you're advising users to treat a smart phone like a late 90s blackberry? An expensive solution that wastes the computing power they carry. Phones today are extensions of desktop computing, and thin clients.

      This is a solution of sorts, but an expensive one that impairs the designed functionality of the devices. And all it takes is one slip up where a staff member urgently needs a connection in an airport and gambles on public Wi-Fi, or one employee's kid to grab the unlocked phone and start following links off reddit... boom, infected.

      Would you not be better getting your patches in place and staying ahead of the threats? With sick a high rate of users staying on lower levels, your not the target then

    18. Re:Exactly right by peawormsworth · · Score: 1

      Why would anyone buy a smart phone and then not use the smart? The smart thing to do is to buy a phone that is not running Google or Apple, like a "burner" or pay-as-you-go phone, which runs something else. The interface is crappy, but it doesn't matter if you don't use it. And they are cheaper by month. And you can pay cash so your identity is less likely to be targeted. I think these phones are ideal for people who: just want to use a phone.

      As a bonus, if you think your phone is insecure, you just throw it out and get another since there is no contract longer than a month.

    19. Re:Exactly right by Coren22 · · Score: 1

      http://www.verizonwireless.com...

      They still sell those $50 feature phones, maybe that should be what s/he buys instead of a smart phone, as clearly, they are not sophisticated enough to deal with the responsibility.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
  42. Unlock by mydn · · Score: 1

    I'd rather they just unlock the bootloader and let us take care of it ourselves.

  43. Feck Android by ickleberry · · Score: 1

    I pay extra for phones that I can install Sailfish OS on

  44. No. by rgbatduke · · Score: 1

    And again, no. I'd freeze it where it is on all my devices first, and wait for the free fork. I'd also retaliate against Google in every way I could, such as de-selecting its search engine, dumping all of my google-specific apps. I wouldn't like it -- some of those are very useful. But Google is making very close to 4 billion dollars NET profit this year without charging for Android. Android gives them an absolutely critical edge in the mobile phone and tablet markets. It fully justifies its share of the 18 billion or so GROSS profits it makes (and spends, and spends, and spends) on sideline speculative investments like self-driving cars and AI.

    --
    Even when the experts all agree, they may well be mistaken. --- Bertrand Russell.
  45. FFS stop deploying device specific images!! by WaffleMonster · · Score: 1

    The solution is simple: fire the cooks. No more device specific images.

    When you install Linux on a desktop or laptop from any manufacturer it for the most part just works. The same needs to be made true for mobile operating systems. This is no longer the late 90's.

  46. Always crying about profit margins... by Red_Chaos1 · · Score: 1

    "everyone's been sucked into the whirlpool of razor-thin profit margins"

    Bullshit. Phones are quite a profit generator. Companies like OnePlus have proven that. $600 and $700 phones produce at least $200 in revenue over the actual cost of the phone.

    That said, it's not just the OEMs that are at fault here. As someone else mentioned, the carriers are quite a problem as well. Take my Verizon Galaxy S4. Verizon has no impetus to doing anything but a carrier unlock. It's got all their crap on it. They also required Samsung to lock the bootloader, and even now that I am no longer a Verizon customer, they (Samsung) will not undo the lock. The phone is in great shape and perfectly viable but not worth selling, and not really usable because it's stuck with Verizon's shit on it. No more updates, no changing Android flavors, nothing. Pretty paper weight. That is what needs to change. When you leave a carrier, if you've paid for the phone, it needs to be unlocked in every possible way.

    1. Re:Always crying about profit margins... by Dixie_Flatline · · Score: 1

      What? No. I can't speak to OnePlus, but basically everyone that isn't Apple or Samsung is losing their shirts.

      http://www.phonearena.com/news...

      Other companies performed so badly that Apple + Samsung account for 105% of the profits in mobile devices.

      (Huawei has a business model that involves selling at cost and monetizing on services, so realistically, they shouldn't be considered in this equation.)

    2. Re:Always crying about profit margins... by thejynxed · · Score: 1

      Without removing the eMMC and using Toshiba's vendor codes to reset it to factory, I don't think even Samsung can unlock the bootloader once the command was given to blow those fuses, at least by any means that is convenient for the consumer. They probably could, but it would involve sending the phone back to Samsung and involve a few weeks of them taking the phone apart, paperwork, etc.

      --
      @Mindless Drivel: 100% of Twitter posts ever Tweeted.
  47. Only buy devices with Stock Android by Anonymous Coward · · Score: 0

    It's really simple: don't buy devices with stupid OEM-customized Android. There's really no reason for doing that.

  48. Where is the onus, really? by fyngyrz · · Score: 1

    Features are one thing. That's a perfectly valid way to sell a new device.

    However, bugfixes during a product's normal lifetime are another thing entirely.

    I am of the opinion that if you sell a piece of software, first, you should specify what it is you are selling it to do, and the environment within which you are claiming it will do these things. Which we can take, at least at the moment, as "the feature list." If the software does not do what you said it would do, or work in the environment you said it would the way you said it would, then I believe you have two, and only two, valid ethical choices:

    o Fix it
    o Refund the customer's payment

    Similarly, if the software does something harmful that you failed to notify the buyer of before the sale, I believe you have two, and only two, valid ethical choices:

    o Fix it
    o Refund the customer's payment (and depending on your original claims, there may be liability as well.)

    I think the mindset that software producers have been allowed to develop that they can leave a trail of broken and never-to-be fixed software behind them, while proceeding forward on the proceeds made from said broken products, has led to a serious downside: that we very rarely actually end up with working software. Instead, we get new software. It's... shiny. Those new features glow like a fancy new chrome bumper. But because it's not actually fixed, it's new, it often (very often, especially in the case of operating systems) causes other things to fail where they used to work just fine, because slipped in their with "new features" are often "yeah, we changed that, it's NEW!" Whereas, if, for instance, Apple had actually fixed the printing bugs for OS X 10.6.8, then those things that were working in that environment otherwise would then have had access to printing functionality as originally claimed by Apple, and stability, reliability and functionality would be optimized.

    An example I am familiar with: If you stick with OS X 10.6.8 on some Mac Minis, then you suffer with a permanently broken printing system in some respects with some CPUs (core duo, IIRC), and if you also depend on 10.6.8 features/capabilities (such as PPC emulation, for instance) then 10.7 and beyond are not an option, therefore you are permanently broken.

    This is just an Apple example. I know Microsoft left the Windows file dialog broken for multiple selection in various releases of Windows, never fixing the problem. To this day, if you select too many files in the most-fixed version of some Windows releases, you'll experience bugs. Another: in some versions of Windows, the font rotation API went clockwise, and in others, it went counter-clockwise. Instead of actually fixing it, Microsoft had us special-case the OS by version. I feel reasonably sure experienced Linux users could supply similar examples in the various commercial Linux distributions where to get a fix, you actually need a shiny new version of Linux, rather than the version you already have, actually fixed and still 100% compatible otherwise.

    What I'm trying to get across here is that I think that we, as users, should do a more thorough job of holding developer's feet to the fire when they give us broken stuff. Speaking as a developer, I try to live this; if bugs are reported to me during the life of a commercial product, then that product's life does not end until those bugs are fixed. I've been doing this with my freeware, also. And -- at least for me -- I find it very satisfying to bring the product as close as possible to what I claimed / thought it was in the first place. I don't like bugs.

    Apple's the company I am most familiar with as I've been using OS X for quite a while now. And I can tell you that my feelings about Apple's choices WRT bug fixes and leaving broken crap behind them are not in any way positive, respectful, or satisfied.

    We can do better. I actively try to do better. And I don't have hundreds of billions of dollars in the bank to back me up, either.

    --
    I've fallen off your lawn, and I can't get up.
    1. Re: Where is the onus, really? by Anonymous Coward · · Score: 0

      "We can do better. I actively try to do better"

      Maybe that's the reason why you don't have billions in the bank and they do :P

    2. Re: Where is the onus, really? by fyngyrz · · Score: 1

      No question about it. I sleep well, though. :)

      --
      I've fallen off your lawn, and I can't get up.
  49. No, it's already paid for... by aaronb1138 · · Score: 1

    Android is paid for by advertising and data mining. Further, Android is provided with virtually zero real support (e.g. direct support and ticketing, solutions not starting with full wipe, etc.). There is no reason I would pay for a product like that ever.

    Now if Microsoft started making Windows ROMs for Android or Apple with iOS, I might consider paying just to try those out on Android hardware. Same would go for Linux distributions (or QNX or whatever) that came without OS level data mining / advertising, and came with real support.

    If the primary method of paying for a product or service is trying to advertise to me or monetize my behavior, I will not pay for it. The same goes for television / cable content, music, and websites. I will pirate it or adblock it without guilt and without sitting through advertisements because I as a consumer already buy plenty of products from the companies paying for the content. I've already paid my share for the product.

  50. Follow the money... by cliffjumper222 · · Score: 1

    Follow the money: After a phone is sold, only carriers and the app store owners make any from the subscriber. Manufacturers get nothing. If the carriers were smart, they would structure their purchasing contracts to include a service contract with the manufacturers, e.g., 10% of the sale price for X years of support. Then the OEM could justify keeping a sustaining engineering team going, assuming the opportunity cost isn't too high.

    1. Re:Follow the money... by tepples · · Score: 1

      Who gets the carrier's share of a Wi-Fi tablet? Comcast?

  51. Google and OEM own fault by kbg · · Score: 1

    This is a self induced problem. The way to tackle this problem is to write the system in the first place to be extremely specific about what is the core android system is and what is the oem system and also any changes to the the core are either handled by specfici config files or very specific Google approved modifications.

    This way Google can update the core system and the OEM can update their system.

    I have worked creating complex software systems where we create the core system but the end user can fully customize business rules, user interface and custom additions without affecting the core system. The end user can the then upgrade the core without affecting the custom solution. So this is possible but of course you have to have very good documentation and practices to make this a reality.

  52. Cheap bastard here by Runaway1956 · · Score: 1

    I don't pay for my desktop OS. I don't pay for my laptop OS. I don't pay for my phone OS. I don't pay any major carrier's price for my phone service - the resellers offer the same services, at about 80% discount.

    No, I'm not about to pay for updates for my phone's OS. There are enough alternatives to avoid paying for either the OS or it's updates. Cyanogen mod hasn't started charging for access to it's servers, have they?

    I might be willing to pay an extra dollar to my carrier, if they BLOCK all those updates, advertising, malware, etc. Might be willing, I say.

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    1. Re:Cheap bastard here by macs4all · · Score: 1

      I don't pay for my desktop OS. I don't pay for my laptop OS. I don't pay for my phone OS. I don't pay any major carrier's price for my phone service - the resellers offer the same services, at about 80% discount.

      No, I'm not about to pay for updates for my phone's OS. There are enough alternatives to avoid paying for either the OS or it's updates. Cyanogen mod hasn't started charging for access to it's servers, have they?

      I might be willing to pay an extra dollar to my carrier, if they BLOCK all those updates, advertising, malware, etc. Might be willing, I say.

      So what you are really saying is that you are a total LEECH, proud of it.

  53. Absolute nonsens by mvdwege · · Score: 1

    The stated reason that margins are too thin for OEMs is nonsense. I own a Blackview phone, from a Hong Kong manufacturer, and it updates nicely, one update a month on average, with a full update from 5.1 to 6.0 last week. So if Blackview can do it on its none-too-expensive phones, what's the other manufacturer's excuse?

    --
    "I know I will be modded down for this": where's the option '-1, Asking for it'?
  54. Liability by gQuigs · · Score: 1

    If we make the manufactures liable if they sell any devices with a known *fixed* security flaw...

    It's not just after market sales. Many Android phones come with vulnerabilities that have been fixed by Google in that stable Android series.

  55. More profit? by pmontra · · Score: 1

    Given the prices of some phones the margin they could have an higher margin on the software update or an higher return on investment. So why not?

  56. You said it by s.petry · · Score: 0

    I'm confused.

    Yes, you are. I specifically asked people like you to skip to the next post.

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    1. Re:You said it by Pax681 · · Score: 1

      I'm confused.

      Yes, you are. I specifically asked people like you to skip to the next post.

      ALL i hear is "blah blah blah.. me me.. i know this!"
      for a so called security man you are quite a fucking moron. leaving vulnerabilities unpatched?
      FUCK ever having you work anywhere i do!

    2. Re:You said it by Coren22 · · Score: 1

      Yeah, that kind of behavior will lose you government contracts, as they expect you to secure all the vulnerabilities unless there is a very good reason to not fix it.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    3. Re:You said it by Pax681 · · Score: 1

      really? I actually HAVE two Govt contracts(one each for two establishments) with the ministry of Defence......and i can tell you that your behaviour means you'd NEVER even be considered for one!

    4. Re:You said it by Pax681 · · Score: 1

      oops... just realised that you were replying to the great unpatched and not me! Apologies Coren22

    5. Re:You said it by Coren22 · · Score: 1

      No problem, was a bit confused for a second there.

      I kind of thought that maybe APK had finally created an account :)

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    6. Re:You said it by Anonymous Coward · · Score: 0

      You STILL sore APK got the best of you due to your big mouth and errors Coren22 https://slashdot.org/comments.... , https://slashdot.org/comments.... + http://slashdot.org/comments.p... ? Yes obviously. Grow up.

    7. Re:You said it by Coren22 · · Score: 1

      Look, I am sorry that you get so butthurt when proven wrong, but posting on everything I post just makes you look like the child, not me.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    8. Re:You said it by Anonymous Coward · · Score: 0

      Your words quoted in fails vs. apk make it difficult for you to say that lie now Coren22. We can read https://slashdot.org/comments.... , https://slashdot.org/comments.... + http://slashdot.org/comments.p... and already decided you failed.

    9. Re:You said it by Coren22 · · Score: 1

      https://slashdot.org/comments....
      https://slashdot.org/comments....

      Keep going, you are only making your software more toxic to everyone seeing how you act.

      https://slashdot.org/comments....

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    10. Re:You said it by Anonymous Coward · · Score: 0

      Coren22 your post history shows your bitch tactics shitting on apk off topic when he's not around. Apk has software others here like. You don't. Speak for yourself. You act a fool that trolls instead of being useful and productive. Grow up instead of doing bitch tactics ok?

    11. Re:You said it by Coren22 · · Score: 1

      LOL!

      Me posting offtopic? Look who's speaking. How many of my posts are marked off topic? How many of yours?

      I'm sure lots of people want your software, so how much do you make off of it since you say it is SOOO popular? It costs what $5 a licence? You drive a Civic or a Porche?

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    12. Re:You said it by Anonymous Coward · · Score: 0

      Jeez Coren22! Could you fuckup any worse than you did against apk in these 3 links or what? LMAO https://slashdot.org/comments.... , https://slashdot.org/comments.... + http://slashdot.org/comments.p...

    13. Re:You said it by Coren22 · · Score: 1

      LMAO, more fucking up by APK trolling like he won an argument?

      Do your tactics ever change? Are you ever going to learn that no one gives a shit about your little war against the truth?

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    14. Re:You said it by Anonymous Coward · · Score: 0

      Coren22 you brought up apk off topic. Your bitch tactics lies failed in you quoted blowing it vs. apk 3x. Your reaction shows you care you blew it https://slashdot.org/comments.... , http://slashdot.org/comments.p... , https://slashdot.org/comments....

  57. Disappointed w/ Android updates vs iOS, would pay by Optic7 · · Score: 1

    I have to say that I am disappointed with how soon Android phones stop being supported by the latest OS versions. Doing a quick search, it appears that iPhone models are supported by new iOS versions for two or three years longer than Android models are supported by new Android versions.

    My examples are the Nexus 4 (Google's own model), dropped by Android 6 in just under 3 years vs iPhone 4s, still going strong at nearly 5 years, supported by the latest iOS 9. This means that there is an even greater disparity between iphones and non-Google Android phones (going by the 18-24 months that folks are quoting). This is the one thing that may turn me back to iPhones, because it would make my hardware purchase be useful for longer, which is good for my wallet and good for the environment.

    But look at the greater picture and compare to desktop/laptop computers, which are usually supported for at least 5 years of OS version upgrades (OS X), and in some cases (Windows, and Linux?), 10+ years. Smartphones should be supported for at least 5 years. After all, many smartphones cost more than many desktops and laptops. If they have to charge for the updates like some OS vendors do, so be it.

  58. open source EOLd devices! by Anonymous Coward · · Score: 0

    Why can't the google android license agreement (or whatever it is vendors sign to put android on their devices) simply stipulate that if they want to stop providing updates to a device, they must open source all the drivers for that device so that the community can continue to support it from AOSP--and not leave them with devices that are security-ticking-time-bombs for lack up patches. They could even get aggressive about the clause and put a timer in--say that any time a device doesn't get a patch within X weeks of the patch being released by google they forfeit their lockdown and must immediately publish their sources. Google could even escrow the sources.

    1. Re:open source EOLd devices! by Anonymous Coward · · Score: 0

      s/lack up/lack of/

  59. Sunshine by Anonymous Coward · · Score: 0

    Of course people would pay for updates. People are already paying for updates.

    Troll carriers lock bootloaders. Users wanting to free their phones blow the locks with Sunshine.

    Sunshine costs $25 per phone where it is used.

    Is Sunshine ever used to downgrade an OS release? It likely happens, but not often. The net effect of Sunshine is an unauthorized OS upgrade, which improves user security.

  60. Sure, but with conditions! (QuidProQuo) by burni2 · · Score: 1

    I get all the source code and a way to sign my own firmware.

    Then I would gladly take the task uppon my own shoulders to carry the tough burden of updaten my Smartphone/OS and making it much easier for Samsung, and so on .. to just publish the initial release and then forget about the user. They would have no problems with me anymore.

    But yes, I would pay a small fee for that kind of service!

    Ohh what a fucking nice bastard I'm, sweet talking them into believing that my only intend would be to carry the burden by myself .. but in secret I just don't want the privacy depleting free giveaways and a secure OS I control and nobody else ... .. Ohh What a fucking dumb James Bond villian I would be, spouting all my evil great plan at Bond and leaving him alone to die and not assuring his death by just shooting him in the head ..

  61. LITERALLY?!?! by Anonymous Coward · · Score: 0

    Price and spec competition is so intense right now that there's literally no option to disengage: everyone's been sucked into the whirlpool of razor-thin profit margins, and nobody can afford the luxury of dedicating too many resources to after-sales care.

    There are LITERALLY SEVERAL options to disengage:
    1) charge more for your every unit of the phone, and make it clear that people who buy this phone will get long-term support, including upgrades, for X years. Use the extra money to build the extra, premium features.
    2) Sell "extended service" contracts that will help fund these updates - people who want long term support then get it, others don't have to pay for it.

    What you're LITERALLY afraid of finding out is that people will decline to buy these pricier options because only a handful of nerds really give a shit whether they're running Android 8.7.1, "Edible Undies", or the old version, Android 5.6.3, "Chocolate Dildo".

    But you keep on believing that everything in the world can LITERALLY be boiled down to a false dichotomy, champ. Your lack of vision is monumental, but unsurprising.

  62. Google needs to fix this by ooloorie · · Score: 1

    The solution is the same solution as for PCs: Android hardware needs to support installation of third party firmware. This requires a functioning "BIOS" (containing hardware-specific drivers) like the original BIOS was intended to be. I wouldn't hold my breath, though.

  63. Unlock the bootloader for unsupported phones by evilRhino · · Score: 1

    No, I don't think it should be necessary to pay for updates after the manufacturer drops support. Back when I had an OG Droid, I updated the OS to a newer version using a bootloader unlocking hack and a community supported ROM (cyanogenmod). If a manufacturer doesn't want to release an OS update, they should unlock the phone so that the end-user can update it themselves if they wanted.

    1. Re:Unlock the bootloader for unsupported phones by Agripa · · Score: 1

      I was thinking something like Open Firmware but since they would have to use JAVA or whatever Google has instead of Forth, it will not work. Torvalds has harped on this issue as well.

  64. Cyanogen not an acceptable solution by ilsaloving · · Score: 1

    If you have to root your phone and apply a completely different version of OS just to stay updated, then the manufacturer has failed.

    The average user should not be required to go to such an extreme just to extend the life of their phone and get security fixes.

    I had to do this with my Galaxy S3 just to make it useable. Between the crapware they saddled it with, and their inability to provide regular updates to THEIR FLAGSHIP PHONE, solidified in my mind that I will never buy another Samsung Android device again, and I will do serious research before I ever buy ANY Samsung product again. In fact, I've basically written off almost the entire Android market because nobody else is any better.

    In the Windows CE days, I learned the hard way that Dell cannot be trusted to provide updates, even when they tell you up front that they will provide them. I no longer buy anything based on a manufacturers promises that they feature I want will be delivered "soon".

    Hell, even Google drops support for their older products frustratingly quickly, although it looks like they've finally pulled their head out of their butt with their most recent hardware. I believe Android 6 runs on hardware as old as 3 years ago.

    Apple may be a bunch of control-freak wankers who charge a mint for their products, but it cannot be said that they don't support their devices. The iphone 4s is almost 5 years old now, and it's still receiving OS updates. I'm irritated by the half-assed way they've been managing their hardware lineup lately, especially their desktop computers, but In a world where even the most expensive tech is now considered disposable, knowing that a company is willing to support their hardware goes a very long way. Only the truly wealthy can drop one or two grand on the latest and greatest and still consider it "disposable".

  65. Wait chain by Pop69 · · Score: 1

    First you have to wait for a new version of Android. Then you have to wait for the manufacturer to integrate their special bells, whistles and bloatware. Then you have to wait for your carrier to add their branding and bloatware. It takes time to add all that bloatware

  66. ATT, Verizon, T-Mobile are you willing to pay for: by Anonymous Coward · · Score: 0

    ATT, Verizon, T-Mobile are you willing to pay for actual customer survey data on new "products" you plan to offer, or are you simply going to ask on /.

  67. I would pay by JustNiz · · Score: 1

    I would pay on 2 conditions:
    1) as near stock Android as possible i.e absolutely no extra bloatware and no features locked out by the carrier (such as hotspot)
    2) its available within say a month of the official Google release (which should be easily possible if all you're doing is re-adding a few existing device drivers and not wasting time integrating other crapware).

  68. Buy a Nexus by Anonymous Coward · · Score: 0

    I did pay for quicker updates - by buying a Nexus device. There's already a choice for people who want quicker Android updates, and I'm super happy with my Nexus 6P.

  69. Defective By Design by Anonymous Coward · · Score: 0

    If I need updates to begin with, there was something already wrong with the device. Make me pay for them? I'll start a lawsuit against you for selling broken stuff. In the long run, the lawsuit would be cheaper.

    But everything is turning into services. Monthly payments for access and additional payment for patches? Hell no.

    1. Re:Defective By Design by Anonymous Coward · · Score: 0

      If I need updates to begin with, there was something already wrong with the device.

      Where's this magical land you live in where a multifunction device never needs an update?

  70. Easy solution by Toshito · · Score: 1

    The solution is simpler than that, OEM should be obligated to sell unlocked phones, and let the user install the vanilla Google Android version if he wants to.

    No more awful customisation and uninstallable apps, and easy upgrades as soon as they're published by Google.

    --
    Try it! Library of Babel
  71. I already pay for Android updates by edtice1559 · · Score: 1

    By buying Nexus branded devices instead of the OEM versions. Calculate the difference between the two prices, and you know what I pay!

  72. maybe by Anonymous Coward · · Score: 0

    the carriers should supply updates for as long as your service with them is.
    now if you are not under a contract or brought your own device.... that could be kind oif grey.
    now on a business side i could see it as yes, say you have a fleet of rugby pros.
    They are running 4.1.2? but there are some things that a company would want like:
    the otg doesnt work right, so you cant plug in a memory stick or mouse.

  73. Wait, I know you by s.petry · · Score: 0

    You are the guy who makes people install Apache because they need to patch for the vulnerability. You used to work for someone who went out of business right?

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    1. Re:Wait, I know you by Anonymous Coward · · Score: 0

      No he's the guy suggesting fairly rightly that you don't leave known security risks because the new might have some more or less severe.

      He's also the guy who's trying to tell you that you don't tell the user he's using his phone wrong by taking advantage of the features of a smartphone. Maybe not everyone needs everything on there, but quick research and googling and finding directions is very useful.

      Your original post reads like you think people should go back to analog phones and typewriters because then there are no security bugs and then you don't have to upgrade and patch at all.

      What you should have said is, not every patch needs to necessarily be applied immediately. Don't always jump to the newest systems/software/devices.

      Telling people to just use their smartphone as a phone and not as the smart is like telling people to only ever eat cold stone soup because using the stove (a feature of many houses) could cause your place to burn down.

    2. Re:Wait, I know you by Anonymous Coward · · Score: 0

      No, he's a guy who got rated +5 insightful for a single ad hominem. Not an argument, not a "incorrect because", but a personal attack. He took a statement regarding risk assessment and turned it into "never patch". Wow, what a "gotcha" and what a genious! Fucking retards and their sock puppets can burn in hell.

  74. Hahahahahahahahaha... by Anonymous Coward · · Score: 0

    Hahahahahahahahahahahahahahahahahahahahahahahah

    iOS FTW

  75. Yes by iampiti · · Score: 1

    A moderate amount of money. I'd also pay for an official rooting method/toggle. i.e.: An official feature of Android, not depending on a exploit which will work only with certain software versions. Mainly for removing unused apps (some Google's).

  76. OEM's that refuse to support their products? by wildtech · · Score: 1

    OEM's that refuse to support their products with updates after the sale deserve to fail.

    There is no excuse for poor customer service.

    I would rather have a well-supported product that works, than a bleeding edge piece of crap that will not be supported in 3 months.

  77. How to really solve it by Anonymous Coward · · Score: 0

    If this is ever going to be solved there's only one way (and it will never happen): When a product goes out of the vendor's support then the vendor must open source all elements required for the continued maintenence.

    If a component manufacturer doesn't want to open source the necessary information for communal maintenence then they would be responsible for maintaining code on any component on demand.

    Like I said, it will never happen. It really is the only way to keep older devices functional without creating extra demands on the manufacturing company (beyond that they make the source available, which is significantly less work than maintenence but undesirable as long as devices are still making money.)

  78. Value of device by KenHansen · · Score: 1

    I'm skeptical about this, because I don't think it is in an OEM's best interest to serve its existing users for long -- how else they will convince customers to purchase their new devices?

    A device designed to be replaced in just two years has less value than one that has say a five-year lifetime... A device with a two-year life is very hard to sell a year after it is released - it only has 12 more months of useful life after purchase.

  79. Not EVERYBODY has been Sucked Into the Whirlpool by macs4all · · Score: 1
    From TFS:

    everyone's been sucked into the whirlpool of razor-thin profit margins, and nobody can afford the luxury of dedicating too many resources to after-sales care.

    Hmmm. I know of at least ONE Cellphone OEM that hasn't fallen for the deadly "Race To The Bottom"...

    Funny. That also happens to be the same OEM who has a (deserved) reputation for not only supporting the vast majority of their mobile devices for longer than pretty much everyone else, but also rolling-out most Security Updates in a very timely manner.

    I wonder if they're on to something...?

  80. Not for bug fixes by zerofoo · · Score: 1

    Software bugs are not bugs - they are defects. Would you pay to fix a manufacturing or design defect in a product you already bought?

    Hell no. The manufacturer has an obligation to deliver a defect-free, feature complete product - that is what I paid for.

    Android and other software should not get a pass on this simply because "software".

    I'll pay for new features and new hardware if the value proposition is there - but I will not pay developers twice. Once to build the product and yet another time to fix the product they screwed up.

  81. Go the Windows way by ET3D · · Score: 1

    The obvious way to go is have Google offer a central repository of updates and drivers.

    Currently OEM's each tailor Android in some way, but that's done in a stupid way in which they edit and release their own version of Android. It would be less work for them and better for consumers if the customisations were layered onto a single OS, and users could get updates for that OS without the OEM doing a thing.

    I realise that this removed some control of the experience from the OEM, in particular when it come to ensuring that a device works well with an OS update, and I think that Google could give OEM's the ability to postpone an update for a limited time (a couple of months) to ensure stability, and an ability for users to roll back updates, but that's it. Once the time passes, the update will be available to all users, if they want it. OEM's could warn users if an update can cause problems, but installation will be out of their control.

    Even if that's not implemented fully, at the very least Google should be able to provide security updates directly to users.

  82. I though I already had! by pseudorand · · Score: 1

    Remember back when I committed to paying Verizon a huge monthly fee for two full years? Android updates part of are what I though I /was/ paying for. Those worthless jerks need to give me my fricking money back!

  83. The real problem is ARM/Linux by bored · · Score: 1

    As Linus bitched about a few years ago, the state of ARM/Linux is truly a sad thing. Mostly because of lack of hardware and software standards. Meaning that every device is basically running a custom kernel with a bunch of custom drivers. The push to use DT is cleaning up some of this, but its happening at a glacial pace. Partially because by itself, DT doesn't fundamentally solve the problem of hacked up drivers that differ from device to device that need DT properties to switch behaviors. AKA someone has to write "unified" drivers without upsetting the apple card on any of the the dozens of buggy hardware devices.

    So, if google updates android it takes massive effort by the manufactures to go through their backlog of products (could be thousands of variations) and port their non upstream changes into the latest versions of android.

    Worse yet, because of the "hacker" mentality of get it working, ship it move on to the next thing, frequently the code bases are all forked for every single device, so there isn't even a unified code base to apply common changes at a number of these companies. At one point the rumor was that one of the large vendors actually had more out of kernel code than the size of the kernel+drivers running on your average x86 machine.

  84. Google by Anonymous Coward · · Score: 0

    Let's be clear. Google created this situation. The ecosystem, the internal dynamics of the vendors operating in this space, Google set the basic rules for the whole thing. No Android phone would exist without Google and Google is by far the most influential player in that market.

    Therefore this is Google's problem to solve. I really don't care how they solve it, but solve it they must.

    I might even be OK with Google redefining Android devices to be appliances. They aren't computers, they are appliances. There are no upgrades once the device leaves the store, no matter what security flaws are identified. It's an appliance, forever frozen in time.

    However Google must solve this problem. The existing situation is bad and it's damaging all around. People have expectations that their phones will get upgrades and with Android, for the most part that isn't happening. Google must solve this problem.

  85. Consumer protection laws better catch up by jaymemaurice · · Score: 1

    I wait for consumer protection laws to catch up for electronic devices and software.

    We are at a point in time where you can buy access to a service with no commitment of the provider of that service to deliver said service.

    A few real world examples:
    Samsung sells Smart TV cameras for Skype, having the Skype logo up until and after Microsoft releases news that Skype will no longer be available on Samsung Smart TVs - Same cameras only work for Skype on Samsung Smart TVs and there is yet no alternative service. The date for which Samsung had agreement to provide access to Skype services was not defined to the customer and obviously not protected by contract.

    Blackberry:
    BB10 devices received a Facebook update that removed the ability to share images or receive Facebook updates after Facebook ended support for Blackberry. Again, the date for which Facebook had contractual obligations to provide support for Blackberry was undefined which means Blackberry was advertise and sell a smartphone to people under a contract which they get stuck in without being able to do the advertised.

    There are thousands more.

    If I sold home renovations, used a third party for bathrooms, then midway through providing renovations, my third party decided not to do bathrooms - I would be on the hook.

    In the days of the cloud and digital electronics, it's the wild west with no such liability to the consumer. Now we are throwing away smart devices and used electronics where the software to run them has become obsolete by design and we seem to accept that.

    Consumer protection laws better catch up.

    --
    120 characters ought to be enough for anyone
  86. Everyone is already paying for this service by HongPong · · Score: 1

    Mobile phone companies occupy leased space on the electromagnetic spectrum (which as today's big health science report indicates may really be carcinogenic, full study here http://biorxiv.org/content/bio... what a surprise). They displace those frequencies from being available for any other public use and then have the temerity to blow off pushing through android updates because they have to futz with the worthless crapware they add to the phones. It is ridiculous to talk of crowd funding. Maybe instead their frequencies should be taken away and given to local people to run data links instead, and force them to make all the crapware optional so that the update packs are far more generic and easier to build... in fact why can't the build process be automated CI testing style? You should be able to generate your own update packs by hitting some checkboxes on their website, end of story.

  87. Hell No by rtkluttz · · Score: 1

    And my reason is different than most. The hardware builder should not even be in control of the OS at all. So why should I pay them for updates to it? I should be able to run the OS or OS variant of my choice on my hardware. There should be consumer protections that keep hardware builders from tieing you to their pre-installed OS. If the hardware inherently supports changing and updating the OS, then it should be flatly illegal for companies to cripple that feature set to create lock in. That would create competition in the marketplace. It would give you options if a OS bundles crapware or spyware or tracks you in ways you don't like.

    --
    Digital is, by definition, imperfect. Analog is the way to go.
  88. 3 year contract. by Tharkkun · · Score: 1

    If I sign up for a 3 year contract I would fully expect to receive updates until that contract is finished. Providing 1.5-2 years of updates is unacceptable.

  89. Why doesn't Google release updates for Nexus 10? by Anonymous Coward · · Score: 0

    So, on one side Google complains the OEM does not release update, but on the other side does not release updates for the Nexus 10...

  90. O/S Updates by AF_Cheddar_Head · · Score: 1

    If you use ESXi as your Operating System you do wait for Dell or HP or whomever to release the brand specific Update package or risk losing support for some of the hardware. For example, PERC6 RAID card or NICs.

  91. why not just let us use untampered os from google? by Anonymous Coward · · Score: 0

    solution is so simple.

  92. Re:Sprint CEO 2014 compensation $21 million dollar by Maxo-Texas · · Score: 1

    I'm not sure of the cost of the update but... looks like they have at least $1 million to spare since that doesn't include deferred compensation like stock options. Similar compensation for other companies in this area.

    That's about 420x the average worker wage in the country btw.

    And..

    http://www.bizjournals.com/kan... [bizjournals.com]
    In just less than eight months, Claure earned $22 million, the paper reports. The data come from Securities and Exchange Commission filings that the Overland Park-based wireless carrier (NYSE: S) filed ahead of its August stockholders meeting.

    And that was just the top executive- not the top 25 executives (also available public information).

    So now tell me why the industry can't afford to update the software on our devices again?

    --
    She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
  93. Wrong question and bad solution by melting_clock · · Score: 1

    Linux distros manage to upgrade thousands of packages easily on a wide range of hardware. There is no reason that Android device manufacturers could not implement a similar approach to updates which would still allow device customisation but utilise a common base for many devices. Offering some apps in an Android store is a step in the right direction but it is not enough to address the core problem.

    Individual packages (or apps) could easily be updated on Android, if manufacturers gave up the stupid idea of upgrading the entire firmware as a whole. Mobile devices have more in common with computers than dumb phones that might have been only sensibly upgraded through whole firmwares. Manufacturers are just making life difficult for themselves.

    As more unpatched and exploited holes cause harm to users there will be more of a push for change. Expecting users to pay for the continued use of a broken and stupid system is not the answer.

  94. Abstraction Layer by Agripa · · Score: 1

    If only there was some kind of abstraction layer so that the OS could be upgraded to add features, remove bugs, and fix exploits without involving the original manufacturer.

  95. I already did... by Anonymous Coward · · Score: 0

    When I bought the phone.

  96. Does no one else see the problem here? by Anonymous Coward · · Score: 0

    "I'm skeptical about this, because I don't think it is in an OEM's best interest to serve its existing users for long"

  97. None of this is a problem by Anonymous Coward · · Score: 0

    ...on PC hardware. You can install a modern OS on a computer from 20 years ago and expect it to work. The key is to force the adoption of standards and force companies to release hardware drivers separate from a particular Android instance, so users have choice of hardware and software that vary independently. Smartphones are a huge, huge step backwards in flexibility.

  98. Mandatory software updates. by Anonymous Coward · · Score: 0

    They should be held liable for damages from published vulnerabilities in their software. The software industry has enjoyed way too much profits from shoddy workmanship and reckless endangerment of our data (and in some cases, our lives).

  99. A dumbphone would cost less by tepples · · Score: 1

    Believe it or not, plenty of people use their smartphone as a phone and ignore the smart.

    Then why are they spending money on a smartphone with its attendant cellular data plan rather than switching to a flip phone that uses a less expensive voice and text only plan and holds a charge longer?

    1. Re:A dumbphone would cost less by Anonymous Coward · · Score: 0

      Compulsory data plans for smartphones, is that a US-only thing? From what I've seen in my own country and elsewhere you can get a smartphone without any plans or contracts at all, and in fact the vast majority of people use them with plain old prepaid service like in the flip phone days. You can buy data allowances for very affordable prices like you do for voice minutes or texts, and the carriers even give free access to Facebook, Twitter and WhatsApp for 30 days with each top-up. Given that and the fact that you don't pay for incoming calls and texts I can totally see why smartphone penetration is so high even among the poor - indeed most people use them as a glorified pay-as-you-go dumb phones with free social networking. WhatsApp is a hugely popular IM platform mainly because of this, SMS is pretty much dead and voice calls are reserved for 'important' stuff.

    2. Re:A dumbphone would cost less by tepples · · Score: 1

      Compulsory data plans for smartphones, is that a US-only thing?

      It might be. See AT&T story from three years ago. There was a workaround, but it's sort of hard to discover and may not still work: buy a phone separately, buy a pay-as-you-go SIM from AT&T, activate it over the Internet from a desktop or laptop computer (instead of in the phone), and be careful never to turn on cellular data. And you can't buy data by the MB on a smartphone on AT&T's network; you have to buy it by the month.

      The CDMA2000 carriers (Verizon and Sprint) are even worse: the CDMA2000 subscriber identity is programmed directly into the phone instead of being stored on a removable CSIM. So they can refuse to activate service on any device for any reason. Phones with LTE have a SIM slot, but that's only for the carrier's LTE network, not its parallel CDMA2000 network.

  100. I would subscribe to Cyanogen by Ilgaz · · Score: 1

    I won't pay a cent to my device manufacturer but I would surely pay a subscription fee to a official, supported Cyanogen port.

  101. Lollipop on the Nexus 7 (2012) is janky by tepples · · Score: 1

    Accepting the offer to upgrade my Nexus 7 (2012) from Android 4.4 "KitKat" to Android 5 "Lollipop" turned it from a smooth experience into a jank-fest whenever anything is going on in the background. Reportedly it has something to do with ASUS cheaping out on its flash memory. If Lollipop stresses the NAND much more often than KitKat did, an upgrade to Android 6 "Marshmallow" would probably make it even worse.

  102. New phones create e-waste by tepples · · Score: 1

    Then who pays for disposal of your e-waste? E-waste disposal is a cost associated with a new phone that is not associated with a software update to an old phone.

  103. Ecosystem among phone owners by martin_dk · · Score: 1

    Back in the days when the next new model would feature groundbreaking changes in our digital intercation, I would throw away any older mobile to get the next new hot thing.

    Now that new models don't introduce anything new of value (at least for the last couple of years) I would rather stick with my old model as long as it actually works.

    The problem is that for no real reason all models become insanely slow about the time when the next new model is introduced. A few thousand images, mail or text messages should in no way slow down the interface as it obviously happens on all models I've ever owned regardless of vendor.

    Sure I know that the vendors want us all to buy a new phone every 1.5 year, but from a broader point of view it would be in everybodys interest to keep phones updated with security updates and running as long as vital parts of the phone is working.

    I would like to pay a flat yearly fee to keep my phone uptodate past the standard two year actual life span my phone sees today. With hundreds of millions owners of the same model, I feel the owners have the capacity to pay for any update they could possibly want.

    As long as the vendors are allowed to hold back updates, discard optimizations and abandon OSes we will see tons of happy hardware trashed only for the benefit of the vendors. Take a read on broken windows...