Carrier Approvals Make Monthly Security Updates 'Not Realistic,' Says HTC

[Lucian Armasu]

HTC USA President Jason Mackenzie said that the slow carrier approval processes of monthly security patches are not realistic, and he doubted Samsung's and LG's ability to offer them in a timely manner as promised.

Carrier Approvals Make Monthly Security Updates 'Not Realistic,' Says HTC : Read more

 

[Solandri]

Why are the carriers even a part of this? If they rented the phone to you for less than the purchase price I could understand it. But they don't. They put you in a binding contract where you pay the full price of the phone. So it's your phone, not theirs. They have no right to install their software on your phone.

 

[targetdrone]

If Google is serious about Android security(which I don't think they are) the only option they have is to force Android Vanilla Bean on every device that wants to be apart of the Android Ecosystem. Giving carriers final say on a security update is ludicrous.

Imagine if security updates for personal computers and servers were left to OEMs with the ISP having final say if it gets released or not. :O

 

[targetdrone]

Why are the carriers even a part of this? If they rented the phone to you for less than the purchase price I could understand it. But they don't. They put you in a binding contract where you pay the full price of the phone. So it's your phone, not theirs. They have no right to install their software on your phone.

It's all because Google wanted a customizable open source firmware for mobile devices. This allowed carriers to make highly customized firmwares that could break if Google push it's vanilla update to these devices.

 

[jasonelmore]

That's like asking why a Network administrator has any say on what type of routers or end user machines go on his network. The approval process is there to protect the network from bad patches that could have backdoors or exploits, or use a lot of data for no reason.

 

[targetdrone]

That's like asking why a Network administrator has any say on what type of routers or end user machines go on his network. The approval process is there to protect the network from bad patches that could have backdoors or exploits, or use a lot of data for no reason.

Funny how Verzion and Cox have no say in what NIC, wifi adapter, or linux distro I can use while connected to their cable and FIOS networks.

 

[quadrider21]

Carriers need to stop loading all their own bloatware onto the phones. (Let people download it from the App stores if the want it)
We need more Android devices like the Nexus series so we don't have to wait for carriers to approve these security updates.

Look what Apple is doing with their new iPhones, you can use them across multiple carriers.
if you have a 6S or 6S Plus, I believe the Sprint, Verizon and T-Mobile iPhones all have their modems unlocked so you could take them from carrier to carrier.
The AT&T 6S and 6S Plus has the modems in it for the other carriers, but is currently software locked to AT&T.

This gives them the ability to push updates and patches out quickly, which they've already done with iOS 9.0.2 coming only a week or two after iOS 9.0 was released.

 

[humorific]

The problem isn't the carriers, or manufacturers either. Android itself is architecturally flawed, as well as iOS. Their design is monolithic. You can't patch it or update it piecewise. Each "update" is almost always an entire software reload. Desktop OSes, like Windows are modular. If a flaw is found in a browser control, Microsoft can just update that control, without having to recompile everything and forcing everyone to reload the entire OS. Manufacturers are unable to patch their old phones because they can't separate the parts that support the phone's unique features from the common code that is flawed, The OS won't let them! iOS isn't much better. However, Apple is a sole source and uses its dominant position to bully the carriers to adhere to their update process if they want to sell iPhones.