Live data from Hacker News

Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

community.rapid7.com

61–70 of 232 posts

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#61
post #19

Use Chrome.

Use Firefox. Why? Chrome isn't open source, if you care about that kind of thing. And personal preference also.

open source.

has extensions.

allows you to control the web, where chrome allows google to control the web for you (e.g. no way to disable referrer for one thing)

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#62
post #53
post #29

Earlier quoted context omitted.

That's not chrome.

It is very very close: https://code.google.com/p/chromium/wiki/ChromiumBrowserVsGoo... tl;dr: Chromium is Chrome minus: 1. Crash/usage reporting to Google. 2. Proprietary video format support 3. Embedded Flash implementation (which doesn't exist on mobile anyway). 4. Google API keys. If what you care about is security auditability, that's pretty good. If you care about running only open source software, that's going…

> If you care about running only open source software, that's going to be very hard to do in the Android/Google-Play ecosystem.

yet, the main advertisement google trhows for android is "open source" "community driven" yadda yadda

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#63

It's this sort of thing that puts me off Android as a platform. Even my mother got sold a 2.2 handset recently (Samsung Galaxy Ace) that hasn't been patched for the best part of 3 years. You never know when you're going to end up with a lemon on your hands. Big jump to this conclusion but I'm more inclined to trust Microsoft at the moment as they have a better reputation for lifetime (unlike Android), have a very pub…

Yes, this continues to be a problem that I hope Google addresses somehow. I got the Samsung Galaxy Nexus because I assumed it would be kept up to date with the latest Android version, since it's using the Google brand 'Nexus' name.

I even asked the sales representative if it would be kept up to date (knowing I couldn't trust them, but was looking for any extra assurance), and they said yes.

Right now it's at 4.3 and wont upgrade...

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#64
post #50
post #34

Earlier quoted context omitted.

Who, engineers? Certainly not my wife or anyone else I have ever met who isn't technical.

My grandmother managed to switch entirely to Chrome on her PC without the help of anyone in our family. Anecdotal evidence works both ways. It isn't 1998. Most people know what a browser is and which one they are using on their desktop. Making the leap to a second browser on a phone (where they can easily get it from Google Play) isn't that ridiculous.

Who's talking about PC? We're talking about phones here, and it is different. Also, it's not anecdotal; we have data. The only reason that IE still has such a large share of the browser market is because people are unaware of and/or don't care about other (better) options.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#65

Replaced by Chrome ("that giant hog"). I'm on a slightly older phone, but I actually removed Chrome from it not long ago. I started having problems with updating apps due to insufficient space, and while I have a fair amount of crap installed, I also have ~2.5GB of "Phone" storage for apps so I started investigating (this is separate from "sdcard" data storage which is ~8GB). Turns out Chrome, at least on the HTC Ama…

I am running out of space because Play Store and Google Framework get bigger and bigger. It fills me with rage how Google actively makes my old phone less capable over time for no benefit to me.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#66
post #42
post #16

Earlier quoted context omitted.

"a browser that isn't supported by Google" But still a browser that was created by Google and was bundled with the OS until 12 months ago, never mind how long it takes OEMs to roll it out. Android https://developer.android.com/about/dashboards/index.html?ut... Just because Google decided not to support it any more doesn't mean they shouldn't . Pointing out Firefox and Opera is all very well, but this is the default b…

Could they update it, though? I thought part of the reason they went to Chrome is that the AOSP browser is baked into the OS and so not updateable without updating the whole OS. So to patch it, they'd have to update the OS, but if you're doing that, then why not just move to the latest OS, which is already fixed?

Yes they can update it. Android provides an update mechanism for system apps.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#67
If you haven't tried Firefox Fennec (android mobile) it is actually pretty good now.

https://play.google.com/store/apps/details?id=org.mozilla.fi...

https://www.mozilla.org/en-US/firefox/partners/#android

They make it for arm and x86 android.

They used to make a windows version but sadly stopped that build.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#68
post #11

So the bug is only for a browser that isn't supported by Google? No surprise that it hasn't been patched. If security is such a big deal to a user they should use a browser that is supported by a strong development team. Firefox and Opera Mobile work fine on low end phones.

"So the bug is only for a browser that isn't supported by Google?"

Wait, what ? I'm not an android user, but I am a chrome user on all of my desktops ... can someone enlighten me ? How is chrome not a browser supported by google ?

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#69

Replaced by Chrome ("that giant hog"). I'm on a slightly older phone, but I actually removed Chrome from it not long ago. I started having problems with updating apps due to insufficient space, and while I have a fair amount of crap installed, I also have ~2.5GB of "Phone" storage for apps so I started investigating (this is separate from "sdcard" data storage which is ~8GB). Turns out Chrome, at least on the HTC Ama…

Having built my own custom Chromium for Android several times on a project, 250MB is out of line for stock Chromium. My builds for my custom browser with Chromium content-shell were ~70-80MB. Chrome, indeed, adds a bit of extra "google chrome", and probably some additional internationalization, but 250MB does not seem square, in my experience.

Re: Major Android Bug Is a Privacy Disaster (CVE-2014-6041)

#70
post #50
post #34

Earlier quoted context omitted.

Who, engineers? Certainly not my wife or anyone else I have ever met who isn't technical.

My grandmother managed to switch entirely to Chrome on her PC without the help of anyone in our family. Anecdotal evidence works both ways. It isn't 1998. Most people know what a browser is and which one they are using on their desktop. Making the leap to a second browser on a phone (where they can easily get it from Google Play) isn't that ridiculous.

Not sure what fantasy land you're living in. But most people are not downloading alternate browsers en masse for their phone. Especially not when there isn't a compelling reason to do so.
Post reply on HN