Beim Kauf eines neuen #Smartphones solltet ihr darauf achten, dass es mindestens fünf Jahre Sicherheitsupdates erhält. Diese Updategarantie beginnt in der Regel ab dem Zeitpunkt, zu dem das Gerät auf den Markt kommt. Kauft ihr das Smartphone erst einige Monate später, müsst ihr berücksichtigen, dass die verbleibende Zeit für Updates entsprechend kürzer ist.
#android #ios #google #apple #security #sicherheit
@[email protected]
Many Android OEMs commit to providing long term security support but don’t follow through on it or do it very poorly. As an example, Fairphone ships the partial security patch backports with 1-2 months of delay and the rest of the patches with up to a year of delay for a new device and longer as the device gets older. They portray shipping updates in 2022 which were released in 2020 as providing 2 more years of support than their competitors. It shouldn’t be challenged more.
@[email protected]
For both Android and iOS, only the latest OS release receives full security patches. Android backports more than iOS to older releases, but it’s only the High and Critical severity patches. Nearly all Moderate and lower severity patches aren’t backported including most privacy fixes.
Each month, there’s a new Android release. The monthly security patches are the incomplete backports, not the latest release. Non-Pixel OEMs only ship the incomplete backports at best right now.
@[email protected]
With the example of Fairphone, they ship the Android Security Bulletin backports with a 1 or 2 month delay. They don’t ship monthly or quarterly releases, so they miss all those patches. The yearly updates get shipped with at least 1 year of delay, so they can’t ship the current monthly and quarterly releases without fixing that first. The delays get longer as the devices get older, until the point it’s multiple years with the delays portrayed as providing longer support.
@[email protected] With the example of Fairphone, they ship the Android Security Bulletin backports with a 1 or 2 month delay. They don’t ship monthly or quarterly releases, so they miss all those patches. The yearly updates get shipped with at least 1 year of delay, so they can’t ship the current monthly and quarterly releases without fixing that first. The delays get longer as the devices get older, until the point it’s multiple years with the delays portrayed as providing longer support.
@[email protected] @[email protected] I have read once that iOS only ships full security patches on the latest release. Do you have a source for this information?
@[email protected] @[email protected] Apple makes that fairly clear themselves by the fact they only backport a subset of the patches and don’t really like acknowledging they’re even still providing support since they want people to move on. You can find many sources for it by searching for it but whether those should be considered reliable is another story. We don’t particularly see a reason to reference what someone else says particularly if they often get things wrong.