{"id":7098,"date":"2017-03-23T12:30:19","date_gmt":"2017-03-23T20:30:19","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/03\/23\/news-889\/"},"modified":"2017-03-23T12:30:19","modified_gmt":"2017-03-23T20:30:19","slug":"news-889","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/03\/23\/news-889\/","title":{"rendered":"Google: Half of Android devices haven\u2019t been patched in a year or more"},"content":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/zapt3.staticworld.net\/images\/article\/2015\/05\/android_primary2-100586098-primary.idge.jpeg\"\/><\/p>\n<p><strong>Credit to Author: Gregg Keizer| Date: Thu, 23 Mar 2017 12:41:00 -0700<\/strong><\/p>\n<p>Google engineers yesterday acknowledged that half of all Android devices had not received a security update in the past year, even as they argued that the firm has made progress in streamlining the open-source operating system&#8217;s patching process.<\/p>\n<p>&#8220;About half of devices in use at the end of 2016 had not received a platform security update in the previous year,&#8221; Adrian Ludwig and Mel Mille, members of the Android security team, said in a <a target=\"_blank\" href=\"https:\/\/security.googleblog.com\/2017\/03\/diverse-protections-for-diverse.html\">post to a company blog<\/a>.<\/p>\n<p>Although Google has issued monthly security updates for Android since 2015 &#8212; and deploys those patches to Nexis and Pixel devices as soon as they&#8217;re available &#8212; other device makers often take weeks or months to push updates to customers, or never do. Android&#8217;s update problem is not new &#8212; it&#8217;s been in stark contrast to other operating systems, notably iOS, macOS and Windows, since Android&#8217;s inception &#8212; and is baked into the relationship between Google and the hardware manufacturers who build and sell phones.<\/p>\n<p>In comparison, Apple claimed that <a target=\"_blank\" href=\"https:\/\/developer.apple.com\/support\/app-store\/\">79% of all iOS devices<\/a> were running iOS 10 as of Feb. 20. That meant nearly eight out of every 10 iOS device owners had updated at least once since mid-September 2016, or in the previous five months.<\/p>\n<p>Ludwig and Mille asserted that Google has been working, and would continue to do so, on streamlining the update process &#8220;to make it easier for manufacturers to deploy security patches.&#8221;<\/p>\n<p>In a <a target=\"_blank\" href=\"https:\/\/static.googleusercontent.com\/media\/source.android.com\/en\/\/security\/reports\/Google_Android_Security_2016_Report_Final.pdf\">year-in-review report<\/a> on Android security issued by Google yesterday, the company was a bit more specific about the progress it believes had been made.<\/p>\n<p>By 2016&#8217;s fourth quarter, more than half of the global top-50 Android devices had &#8220;a recent security patch,&#8221; the report said, but without describing <i>how<\/i> recent. Google also claimed that through an expedited approval process, hardware and carrier approval times for security updates had been reduced from &#8220;over one month to less than one week.&#8221;<\/p>\n<p>Yet few Android devices can boast of impressive patch rates. And of the 15 models that reached an update rate of 60% or more &#8212; meaning that by the end of last year they had been updated at least once since Oct. 1, 2016 &#8212; six were Google-sold Nexis or Pixel devices.<\/p>\n<p>The patching situation in the U.S. was better, Google reported. Seventy-eight percent of what it defined as &#8220;flagship&#8221; devices on the country&#8217;s four major networks had been patched in the past three months. Those devices included the usual suspects, primarily Samsung Galaxy phones, along with others such as the LG G5, Moto X Style and Xperia Z5.<\/p>\n<p><a href=\"http:\/\/www.computerworld.com\/article\/3184400\/android\/google-half-of-android-devices-havent-been-patched-in-a-year-or-more.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/zapt3.staticworld.net\/images\/article\/2015\/05\/android_primary2-100586098-primary.idge.jpeg\"\/><\/p>\n<p><strong>Credit to Author: Gregg Keizer| Date: Thu, 23 Mar 2017 12:41:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>Google engineers yesterday acknowledged that half of all Android devices had not received a security update in the past year, even as they argued that the firm has made progress in streamlining the open-source operating system&#8217;s patching process.<\/p>\n<p>&#8220;About half of devices in use at the end of 2016 had not received a platform security update in the previous year,&#8221; Adrian Ludwig and Mel Mille, members of the Android security team, said in a <a target=\"_blank\" href=\"https:\/\/security.googleblog.com\/2017\/03\/diverse-protections-for-diverse.html\">post to a company blog<\/a>.<\/p>\n<p>Although Google has issued monthly security updates for Android since 2015 &#8212; and deploys those patches to Nexis and Pixel devices as soon as they&#8217;re available &#8212; other device makers often take weeks or months to push updates to customers, or never do. Android&#8217;s update problem is not new &#8212; it&#8217;s been in stark contrast to other operating systems, notably iOS, macOS and Windows, since Android&#8217;s inception &#8212; and is baked into the relationship between Google and the hardware manufacturers who build and sell phones.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3184400\/android\/google-half-of-android-devices-havent-been-patched-in-a-year-or-more.html#jump\">To read this article in full or to leave a comment, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10462,714],"class_list":["post-7098","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-android","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=7098"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7098\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=7098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=7098"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=7098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}