Researchers Suggest Phone Makers Mislead Consumers About Security Patches
Apr 12, 2018, 1:19 PM by Eric M. Zeman
Security Research Labs says Android phone makers often miss security patches but still tell owners the phones are up-to-date. Researchers Karsten Nohl and Jakob Lell examined the code of some 1,200 phones from more than a dozen phone makers for every security patch released during 2017. They discovered phones from nearly all makers missed at least some patches. Phones from Google, Sony, and Samsung ranked fairly well, missing an average of just one patch. Phones from Xiaomi, Nokia, and OnePlus missed between one and three patches per update, while devices from HTC, Motorola, LG, and Huawei missed three to four, and phones from TCL (Alcatel) and ZTE often missed more than four patches per update. High-end devices with processors from Samsung or Qualcomm were more likely to updated properly, while low-cost devices with processors from MediaTek were less likely to be updated properly. Nohl and Lell say what's worse than the missed patches are the phone makers' claims to the contrary. "We find that there's a gap between patching claims and the actual patches installed on a device. It's small for some devices and pretty significant for others," said Nohl to Wired. "We found several vendors that didn’t install a single patch but changed the patch date forward by several months. That’s deliberate deception." The researchers claim this lulls consumers into a false sense of security, though they admit that hacking into Android phones through any of the missed patches is a difficult task at best. In response to the data, Google argued that not all the devices researched were Android certified, and that modern Android phones have other security measures in place to protect them. "Security updates are one of many layers used to protect Android devices and users," said Scott Roberts, Android product security lead at Google. "Built-in platform protections, such as application sandboxing, and security services, such as Google Play Protect, are just as important." Still, Google said it would work with Security Research Labs to investigate Nohl and Lell's findings.
Jan 14, 2021
Samsung today officially unveiled its Galaxy S21 series of flagship phones for 2021. All three models sport a distinctive new "Contour Cut Camera" design where the metal frame extends around one corner to surround the rear cameras.
Mar 10, 2021
Asus today announced the ROG Phone 5, its newest flagship gaming phone, following the ROG Phone 3. The ROG Phone 5 brings the ROG Phone series up to date for 2021 with a Snapdragon 888 chip, Android 11, and 65-watt fast charging for its huge 6,000 mAh battery.
Mar 23, 2021
OnePlus today announced the OnePlus 9 and OnePlus 9 Pro, its newest flagship phones. The 9 Pro is a true flagship-class phone with a QHD AMOLED display with variable refresh from 1 to 120 Hz, and IP68 water rating, starting at $969.
Feb 9, 2022
Samsung today announced its lineup of flagship phones for 2022: the Galaxy S22 series. The top-end S22 Ultra sees the biggest changes as it essentially absorbs Samsung's Note series with an integrated S Pen stylus and a more Note-like shape and design, instead of the Contour Cut design of the other models.