aboringusername
Joined 6 years ago
Joined 6 years ago
> an early warning notification of an actively exploited vulnerability, without undue delay and in any event within 24 hours of the manufacturer becoming aware of it
> without undue delay and in any event within 72 hours of the manufacturer becoming aware of the actively
> without undue delay and in any event within 24 hours of the manufacturer becoming aware of it
> without undue delay and in any event within 72 hours of the manufacturer becoming aware of the incident
"Sorry your honour, we only became 'aware of it' 2 years later, pinky promise ;)".
So any competant authority would have to prove when they 'became aware of it', whatever the test to pass that threshold means.
[1]: https://news.ycombinator.com/item?id=45911673
[2]: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ%3AJOL...
> Clause 1.2:
> (6) Operating system updates:
> (a)
> from the date of end of placement on the market to at least 5 years after that date, manufacturers, importers or authorised representatives shall, if they provide security updates, corrective updates or functionality updates to an operating system, make such updates available at no cost for all units of a product model with the same operating system;
> (b)
> the requirement referred to in point (a) shall apply both to operating system updates offered voluntarily by manufacturers, importers or authorised representatives and to operating system updates provided to comply with Union law;
> (c)
> security updates or corrective updates mentioned under point (a) need to be available to the user at the latest 4 months after the public release of the source code of an update of the underlying operating system or, if the source code is not publicly released, after an update of the same operating system is released by the operating system provider or on any other product of the same brand;
> (d)
> functionality updates mentioned under point (a) need to be available to the user at the latest 6 months after the public release of the source code of an update of the underlying operating system or, if the source code is not publicly released, after an update of the same operating system is released by the operating system provider or on any other product of the same brand;
> (e) an operating system update may combine security, corrective and functionality updates.
I'm curious if there's any back up plan to an operating system used by billions. One would think, and hope, the EU would have an alternative ready to go at a moment's notice. Android is literally too big to fail, but I doubt the EU would be ready even though you could consider the failing of Android a national security emergency.
I would like to know more about what's going on at Google that are causing these issues.
I sincerely hope one day we can free these hardware devices from the shakles of their software and run anything that's possible.
Until such a time iOS devices are strictly off limits until at least a grapheneOS can run iOS at a minimum.
Pixels offer affordable options which is why unless you can cater to that market, a Motorola-only GrapheneOS future will only gain traction if you're able to get a cheaper low/mid-range option out there, akin to the Pixel A-series.
Anyone who values Graphene's work will purchase one of their Motorola devices, whatever the cost, otherwise it seems your choices are going to be giving up more data and control to Google, because they are clearly, obviously and systematically trying to remove GOS from Pixels (lack of source code, removing hardware features, making it purposely difficult to support pixels).
I predict by 2030 GrapheneOS will not support any new pixels entirely. The existing pixels will eventually die off and that will be that.
[1]: https://blog.google/security/new-android-network-security-pr...
However, services that homeless people will be using should factor in their target audience (such as the homeless not having a phone at all, or maybe not one that's up to date even).
However, like it or not, having a modern up to date device is becoming essential for even rudimentary basic access to society. Whether that's right or wrong it's where we are.
I mean, that seems to be the general societal attitude.
And you'll need to buy new ones because many things are app only, or are migrating that way (including being able to travel to certain countries)
It seems on iOS you'll even need to download an application, which is quite a bit of friction.
In the current economic times, adding minutes onto the user journey is not going to result in increased sales, I suspect the data will prove the opposite.
Using a mobile device is bad enough as it is: TOTP, email, SMS codes, 3DS etc, while you can say this is part of the "flow", it's too much. I can see many abandoned journeys from this.
If you put data onto a networked device it may be sent to some place else.
If you don't want your data being shared:
Use a device that does not have any networking capability (both hardware and software wise)
Use a pen and paper, you can shred and destroy as you see fit.
If you're using an application on a mobile device with mobile data/wifi, the chances are, your data is being uploaded.
You will not need a Google account.
Look at flightradar. Look at Marinetracker. Look how many cars are used every day and the billions of barrels of oil we're consuming.
We are not going to consume less oil, unless there's some manufactured event that stops us (like COVID), or we physically run out.
People are addicted to moving about, making things, entire economies rely on it.
And nobody here would sacrifice opportunity for a future that may not even happen. Even if you're the most conscious consumer, the world's going to heat up anyway. You not driving a gas car, or not eating meat, won't make any difference because somebody else will be there to consume what you leave behind.
And I plan to use as much oil as possible, take as many planes and cruises as I can, eat as much meat, because I frankly care less and I'm not going to miss out if I have the choice. I know I am not alone in this thinking and many, many others also no longer care, not that they ever did.
But you're more than welcome to leave the resources to others who will gladly use them.