> These gaps between upstream vendors and downstream manufacturers allow n-days - vulnerabilities that are publicly known - to function as 0-days because no patch is readily available to the user and their only defense is to stop using the device. While these gaps exist in most upstream/downstream relationships, they are more prevalent and longer in Android.
Ouch. Maybe acknowledging it means that they can act on improving that ecosystem with their downstreams?
Ouch. Maybe acknowledging it means that they can act on improving that ecosystem with their downstreams?