what's more secure, re android version vs security patch level

Discussion in 'Google Android (OS & Devices)' started by ae00711, Oct 9, 2019.

  1. ae00711

    ae00711 Member

    Joined:
    Apr 9, 2013
    Messages:
    1,435
    what is more secure?

    a phone running Android 7.1.2 + Sept.'19 security patch

    or

    a phone running Android 9 + a security patch from 6 months ago?
     
  2. waltermitty

    waltermitty Member

    Joined:
    Feb 19, 2016
    Messages:
    1,031
    Location:
    BRISBANE
    'Security patch' is probably the vendor patch where release schedules are up to the discretion of the vendor (as the name implies). This is your RIL/Radio/Baseband which is usually a black-box. Android OS security patches usually come with detailed change-logs but vendors are the worst and usually just chuck 'performance improvements' in the update description. Both are important, but all of your SS7 stufff (LTE/phone calls/SMS) goes through the 'vendor' baseband side and you can't audit or inspect that code at all, Android OS is FOSS and good vendors will throw their kernels over the fence (with whatever blobs their vendors give them).
     
  3. OP
    OP
    ae00711

    ae00711 Member

    Joined:
    Apr 9, 2013
    Messages:
    1,435
    nay, they are listed separately.
    in the settings details there are both 'vendor security patch', which, from a quick google I did, is firmware type stuff
    'security patch' is related to this: https://arstechnica.com/information...ty-that-gives-full-control-of-android-phones/

    and then there's the OS itself.
     

Share This Page

Advertisement: