Security in the Android ecosystem is awful. There’s just no other word to describe it.
In large part, the blame for that can be placed at the feet of Google. Although they have succeeded in creating a wildly successful platform, their management of OEM devices (in particular, security updates for them) have been virtually nonexistent.
This has led to a situation where many device manufacturers don’t bother to push critical updates at all. It costs money to do so, and until now, there hasn’t been a downside for failing to. That, however, is about to change.
Recently, Google announced some big changes coming to their OEM agreements that would require Android device manufacturers to roll out security updates on a regular basis.
The company offered few details when the announcement was made, but since that time, an unverified copy of the new contract was leaked and obtained by The Verge. It sheds some additional light on what’s coming.
Specifically, the new agreement requires OEMs to regularly schedule updates for any device launched after January 31, 2018 if that device has been activated by more than 100,000 users. OEMs will be required to provide security updates for a minimum of two years.
In addition to that, they must make updates that address security vulnerabilities available to their customers no more than 90 days after the patch is released. Taken together these two pieces of information point to the fact that OEMs will be required to issue quarterly updates to their customers, at a minimum.
It’s a good move and one that’s long overdue. When this new agreement becomes official corporate policy, it will have an almost immediate, profound impact on security in the Android ecosystem. While it’s far from a perfect solution, it represents a very good beginning.
As far as hackers are concerned, no target is safe. Not even the Girl Scouts.
IBM has recently announced what is to be the largest open source acquisition in history. They’re buying Red Hat for a staggering $34 billion dollars. This, as the saying goes, changes everything.
Do you use Tumblr? If so, be aware that your personal information may have been exposed.
McAfee has long been a popular target of scammers, but recently, they’ve changed the nature of their game.
If you take a lot of photos with your Android device, you’re probably constantly on the lookout for a better way to organize them and access them. That’s exactly what the authors of the malicious app called “The Album, by Google Photos” are hoping for.
Anthem is one of the largest insurance providers in the United States. Unfortunately in 2015, they had the dubious honor of suffering the largest health data breach in history. It left protected health information of nearly 79 million of their customers exposed.
Move over Facebook. Where teens are concerned, Instagram reigns supreme, according to a recently published survey.
You probably haven’t heard of the Centers for Medicare and Medicaid Systems.
Microsoft hasn’t been terribly impressive lately when it comes to Windows 10 updates. In fact, it’s fair to say that they’ve been a complete mess. Just recently, they’ve issued updates that have deleted user files and caused crashes after creating incompatibilities with keyboard drivers. Now, (courtesy of the most recent Windows 10 update), many users are reporting that they’ve got no sound due to corrupted or incompatible audio drivers.
