Samsung Update OTA Once Month

[steveo67]

Samsung are to realise OTA updates & patches once a month

http://www.sammobile.com/2015/08/05/samsungs-new-update-process-will-push-android-security-fixes-ota...

[BandOfBrothers]

Hi,

Thats left me wondering if things are that worrying that Samsung feel the requirement to push updates so often. 

Reminds me of the old Windows XP days when updates were very frequent. 

Also it'll be interesting to see how the Networks themselves handle this in how fast they'll let the update feed to the phones on Network branded handsets. 

[hrym]

I've seen similar reports.  My understanding was that it was a bit like PC operating systems and programs and phone apps (all of which update regularly) and came in response to the Stagefright scare.   These updates will be for security, as I underand it, but may also simply be to reassure users - after all, which would you opt for: a phone that has monthly security updates, or one which might give you one once in a while? :smileyvery-happy:

[cornasdf]

I realize this is an old thread but i came here looking for this info and would like to correct the sentiment by the second poster.  A regular update cycle is critical in securing complex devices like your pc or your phone.

Google has been rolling regular updates for some time.  The updates for android (unlike iPhone) then go to the manufacturer, who has to release a version for their hardware.  They then go to your carrier, which has to release a version as well.  Historically, both of these players have been slow.

Samsung has committed to (and has been) releasing monthly updates, presumably based on the google updates.

I would like to know what vodaphone's stance on releasing these updates are as it is a glaring security hole and will only be getting worse.

[Retired-Charles]

@cornasdf - We don't get involved in OS or manufacturer updates as all security checks would've been carried. If there was any issues we would then release a statement.

[cornasdf]

Hi Charles, 

Thanks for the response.  I am not sure I follow you.  You say Vodafone isn't involved in OS or manufacturer updates but you have put out a self branded version of both of those and are gating my access to the updates.

Google and Samsung are both releasing updates monthly.  My Vodafone branded handset doesn't receive those.  Am I missing a step?  If it isn't Vodafone that would release them who else is involved in the chain?

Thanks

cornasdf

[ChazzD]

@cornasdf

We don't have specific information relating to when firmware updates will be released. 

This is because there may be last minute security checks or testing which would cause delay. Please see our firmware statement for all the details we have. 

[cornasdf]

I have seen that statement and, in my opinion, it is stuck in an old paradigm that is not applicable to today's network software.  In any case, pretending that major OS updates and security updates can be treated in the same way is wrongheaded.

Here is the latest monthly patch list from google.  6 critical exploits and 12 high exploits patched, 4 remote code executions.  Similar numbers last month.  Fixes for these patches are public knowledge (open source).  Now that the fix is out, the exploit is effectively public.  As long as you refuse to patch your devices your users are left wide open to known exploits.

http://source.android.com/security/bulletin/2016-05-01.html

Sooner than later, somebody is going to tear through Android users with an exploit that should have been mitigated with a reasonable patch cycle.  (Think SQLSlammer) I can only hope that I am not too affected when it happens.

The only Android device I can recommend is the Nexus line (which you seem to have discontinued) as it goes around the carrier for patching.

[Nakatomi_Uk]

I believe vodafone should also these updates because we now use fingerprint scanning on todays new phones, we use contactless pay from the likes of Paypal or Apple Pay even some banks are looking into this feature if not already. I would prefer to have regular updates top security because of these features in todays high tech world