GT500
https://zentalk.asus.com/en/discussion/comment/219280#Comment_219280
You seem to be quoting random articles about how Google didn't patch a vulnerability fast enough, and claiming that this is somehow proof that third-party phones are somehow more secure than vanilla Android even if they don't bother distributing security patches every month. I'm reasonably certain that you don't know what you're talking about, and I think it's time to end this conversation and stop hijacking this topic.
View post
Quoting random articles, aka showcasing multiple examples on the issue that google themselves take ages to implement fixes, which is very easy to confirm by literally taking the reported CVE's and check on googles own tracker. Taking over 6 months to accept a commit into their repo is just abysmal, but you probably don't even understand what that means anyways.
Its clear you don't really know what you're talking about. At this point I'd be shocked if you could navigate around in googles repos.
Since youre clueless and this is probably going to be interesting for some, I'll explain to you why google taking 2 months to add a fix to a 0 day vulnerability is abysmal and unacceptable. Most exploits are found by researchers or the companies providing the systems/drivers and whatnot. They are the vast majority of vulnerabilities found, while some are marked as "critical" nobody has actually misused them or the like so in the time they are being fixed, they are not dangerous until hackers discovers them. Taking time on these exploits (which asus sometimes does) is no problem whatsoever.
The term "0 day exploit" originates from the fact that hackers aka malicious prople are abusing an exploit and the developers have had 0 days to fix it since they can't fix anything they werent aware of. One of these exploits got reported and ignored for 2 months. You can cry as much as you want about ASUS being late to add patches to vulnerabilities that arent exploited all you want, but when google ignores something for a longer period that is being actively exploited then your idea of security is pathethic.
Yes, major companies dont care about security as much as they should.
Yes, it's actually sad that we are in this state.
and yes, security shouldnt be based on what company feels like implementing, if you want a secure phone without major vulnerabilities, get a noka 3210. There are just way 2 many exploits due to way 2 many drivers, hardware components and whatnot to keep up, however the priority should always be 0 day exploits = top, the fact google don't seem to always get that is weird.
However:
In the last few years, google has upped the anti and so has ASUS and other companies as well. Security is getting better and better and is being taken more serious, however there are some serious implementation issues that needs solving first, the fact phones typically don't get updates after roughlu 3-4 years is just sad to say the least. I think Samsung is the only android phone manufacterer that actually keeps a much longer software support lifespan, sadly they are anti consumer in many ways such as repair.
In the end, we as the consumer are pretty fked. However companies like ASUS are more pro consumer but lack ressources to deliver excellent service.
