World’s Largest Android Update by Google to tackle Stagefright Bug.
Google Confirmed that nearly all devices are vulnerable to Stagefright. “Hundreds of millions of devices will be updated in the next few days,” said Adrian Ludwig, lead engineer for Android Security. He also mentioned Safety Net, an intrusion-detection system that monitors high-risk devices checked 200 million devices and found only around half a percent had something harmful. The Stagefright flaw was a serious issue, with 95 per cent of devices potentially vulnerable, he said, but there were mitigating factors. Android Jellybean 4.1 or later devices had address space layout randomization (ASLR) to block memory exploits, he said, and this bought enough time to sort out the issue.
Ludwig told that “Nexus device will receive regular OTA updates each month focused on security, in addition to the usual platform update. Also Samsung, Motorola, HTC, LG, Sony, Android One, and hundreds of other manufacturers are going to push out the patches too”
Dong Jin Koh, EVP of Samsung Electronics, Mobile R&D Office. said that, “With the recent security issues, we have been rethinking the approach to getting security updates to our devices in a more timely manner, Since software is constantly exploited in new ways, developing a fast response process to deliver security patches to our devices is critical to keep them protected. We believe that this new process will vastly improve the security of our devices and will aim to provide the best mobile experience possible for our users.”
In addition, Google, Samsung, and LG have made a commitment to send out monthly security patches to users that will fix any upcoming issues in the operating system. These updates have been sent out to manufacturers for years, but now end users will get them too, and they will continue for at least three years after the launch of any new handset.
Ludwig promised that Google is investing considerably in hardening up the Android ecosystem and blocking applications that could be considered malware.
Following Google’s announcement, the most popular Android are, or will be, fixed this month. The company confirmed fixes for the HTC One M7, One M8, One M9, LG Electronics G2, G3, G4 and Sony Xperia Z2, Xperia Z3, Xperia Z4, and Xperia Z3 Compact. So far Google has warned developers about more than 60,000 applications, but Ludwig said he wanted that cut to zero in the long run.