Live data from Hacker News

There are over a billion outdated Android devices in use

danluu.com

211–220 of 474 posts

Re: There are over a billion outdated Android devices in use

#211

Earlier quoted context omitted.

1. Ability to passively decrypt network activity (KRACK). 2. Ability to throw a fully persistent implant onto the device (via Wi-Fi exploit + pivot to AP kernel exploit)

Most phones already come with two persistent implants - the user-antagonistic OS, and the baseband processor! I'm all for trusting computing devices to act as one's agents, but attempting to do so with anything resembling a modern mobile phone is barking up the wrong tree. Even though just having one means taking the location-tracking hit from negligently designed cellular protocols, further exposure can be mitigated…

At some point, reckless behavior affects people beyond the individual. I am irritated that people allow their systems, networks, devices etc to become compromised, thus becoming the assets of malicious actors. Most of the people in this category have are not particularly savvy, which doesn’t give them an out so much as it explains the predicament. However, you are demonstrating that you choose to be in this category, despite understanding the problem. You are letting your personal convictions get in the way of good judgement. You now shoulder responsibility for knowingly making the world a little less safe for the population at large.

Re: There are over a billion outdated Android devices in use

#212

With current and older devices working perfectly well, and new devices being even less serviceable and more user-hostile with greater efforts towards planned obolescence, is it any wonder that people just aren't "upgrading" any more? I don't consider this a problem, but a sign of an ecosystem that is gaining stability. In fact I'd say it's even better, from an e-waste perspective, that the amount of churn has decreas…

OK, but it means a billion android devices are vulnerable to various attacks. It would be cool if we could have, idk, backported security fixes for devices that hold tons of critical information?

Re: There are over a billion outdated Android devices in use

#213

Earlier quoted context omitted.

1. Ability to passively decrypt network activity (KRACK). 2. Ability to throw a fully persistent implant onto the device (via Wi-Fi exploit + pivot to AP kernel exploit)

Most phones already come with two persistent implants - the user-antagonistic OS, and the baseband processor! I'm all for trusting computing devices to act as one's agents, but attempting to do so with anything resembling a modern mobile phone is barking up the wrong tree. Even though just having one means taking the location-tracking hit from negligently designed cellular protocols, further exposure can be mitigated…

Most people are willing to accept the risk that the NSA is listening in on them. Most people are not willing to accept the risk of an arbitrary person being able to steal their identity.

Re: There are over a billion outdated Android devices in use

#214
I often get sympathetic comments for being an Android developer because of this. It's honestly not that bad. Android provides backwards compatible support libraries for whatever SDK you're supporting, and was designed from the beginning to handle diverse screen sizes and hardware.

By far a bigger problem is manufacturers shipping their own version of Android that is sometimes incompatible with the SDK. I've had to implement some ugly hacks for Samsung before, which is unfortunate because of how popular their hardware is. It's becoming less of a problem over time though.

Re: There are over a billion outdated Android devices in use

#215

The flipside of this is that developers are forced to support versions of their apps that are compatible with previous operating systems. That's bad for developers, but good for consumers. iPhones shove updates down your throat as a user. They're so persistent that inevitably most people will accept the new update - and even if you're stubborn like me, eventually your apps will no longer be supported under the newer…

> iPhones shove updates down your throats as a user

It doesn't, you don't have to update iOS. You can keep an older version. The same with Android. The only difference is that AppStore won't serve you older app-versions that would still work for your iOS version, after some time. While PlayStore still serves you much older app-versions.

Re: There are over a billion outdated Android devices in use

#216
post #53

Earlier quoted context omitted.

Hosted on a dubious server with no guarantee at all there is no malware in it.

I trust the community on XDA composed of actual users and developers who are also users, more than the faceless corporation whose profit largely comes from extracting as much of your personal information as possible and monetising it.

I’d rather trust a faceless corporation with a reputation to keep over a bunch of faceless anonymous dudes on a forum.

Re: There are over a billion outdated Android devices in use

#217

Love the HN crowd here explaining that staying still on old tech full of security holes is a-ok. :) Both Android and iOS have made awesome progress on all fronts, from security to stuff like AR and ML. You can now have a supercomputer in your pocket - just using it for phone/texts is such a waste.

> Love the HN crowd here explaining that staying still on old tech full of security holes is a-ok. :)

It’s disheartening when a forum full of supposed tech enthusiasts starts to morph into a bunch of paranoid tech Luddites. That is what, imho, killed slashdot. Every post was full of comments slamming anything new. Eventually it just got toxic and boring. Who wants to hear a bunch of paranoid outliers brag about their 8 year old phone on a forum like this?

The tech industry is constantly changing. If you can’t handle it, you should go into something else...

Re: There are over a billion outdated Android devices in use

#219

Love the HN crowd here explaining that staying still on old tech full of security holes is a-ok. :) Both Android and iOS have made awesome progress on all fronts, from security to stuff like AR and ML. You can now have a supercomputer in your pocket - just using it for phone/texts is such a waste.

> Love the HN crowd here explaining that staying still on old tech full of security holes is a-ok. :) It’s disheartening when a forum full of supposed tech enthusiasts starts to morph into a bunch of paranoid tech Luddites. That is what, imho, killed slashdot. Every post was full of comments slamming anything new. Eventually it just got toxic and boring. Who wants to hear a bunch of paranoid outliers brag about their…

Harsh tone but 100% warranted imo. It’s fascinating to see so many otherwise smart people completely fail to understand the changes around them.

Re: There are over a billion outdated Android devices in use

#220

The flipside of this is that developers are forced to support versions of their apps that are compatible with previous operating systems. That's bad for developers, but good for consumers. iPhones shove updates down your throat as a user. They're so persistent that inevitably most people will accept the new update - and even if you're stubborn like me, eventually your apps will no longer be supported under the newer…

> iPhones shove updates down your throat as a user.

And we have the monster that was Windows XP because of users thinking "updates" are "forced" down throats.

iOS is correctly celebrated for having such a high adoption of the "latest and greatest", and certainly hasn't become the demon that is the unpatched Android landscape.

So thankfully, from NetSec to the end user, it's a fantastic thing that iOS keeps devices more up to date than android.

Post reply on HN