1000$ phone - no security updates

[dlgus]

Especially given that consumers can easily search for evidence on Samsung's update track record.

Caveat Emptor.

AND it's not like we NEVER get updates, just slower than we'd like. But you know it's a no win situation for them. Let them put out a patch quick that messes up our 1000 dollar phones and BOY will they hear it. lol

 

[natehoy]

The only way to ensure updates for any phone is to have one directly from Google. Other manufacturers seem to be good for the first few months then just drop off completely.

I'll give Samsung relatively high marks in terms of security updates. The Note 4 (three years old) also has the August update as well.

I think the reason that September this year is a tad more important is that it contains a patch for BlueBorne, which has been covered as a fairly exploitable security vulnerability which is patched in the AOSP September 2017 patch level (though Samsung can, and possibly might, make their own patch to protect from BlueBorne).

But as far as major versions are concerned, I agree. Most phones are good for one annual Android update. Some are good for two. Rarely is there an update for a third year unless you want to get into aftermarket firmware.

 

[Almeuit]

I'll give Samsung relatively high marks in terms of security updates. The Note 4 (three years old) also has the August update as well.

I think the reason that September this year is a tad more important is that it contains a patch for BlueBorne, which has been covered as a fairly exploitable security vulnerability which is patched in the AOSP September 2017 patch level (though Samsung can, and possibly might, make their own patch to protect from BlueBorne).

But as far as major versions are concerned, I agree. Most phones are good for one annual Android update. Some are good for two. Rarely is there an update for a third year unless you want to get into aftermarket firmware.

We are in mid October though ... and still on the August patch. That is truly not a good record for updates. There is nothing to say by November that we will even get October. Also I get it patched a big bug but as we saw Google patched in Sept. and in Oct. near the start of the month. If they can do it Samsung could by now as well .

 

[natehoy]

We are in mid October though ... and still on the August patch. That is truly not a good record for updates. There is nothing to say by November that we will even get October. Also I get it patched a big bug but as we saw Google patched in Sept. and in Oct. near the start of the month. If they can do it Samsung could by now as well .

Samsung is always about a month late in patches. Always. Even on brand new phones. It's a 50:50 of getting the patches within the same month. September is "only" about 1-2 weeks late by Sammy's established patching practices. Still late, and especially troubling given BlueBorne. Sammy REALLY needs to get this patch out, and they must be having some serious problems not to have punched this one out long before now.

However, I was addressing the quote specifically (everyone but Google drops phones from security patches after a few months). Samsung may not be the fastest to release patches, but they keep those patches rolling out solidly month after month for several years after phone release, even if they aren't all that great about major Android updates. There are few manufacturers, honestly even including many prior Google lines, that can make that claim.

 

[Almeuit]

Samsung is always about a month late in patches. Always. Even on brand new phones. It's a 50:50 of getting the patches within the same month. September is "only" about 1-2 weeks late by Sammy's established patching practices. Still late, and especially troubling given BlueBorne. Sammy REALLY needs to get this patch out, and they must be having some serious problems not to have punched this one out long before now.

However, I was addressing the quote specifically (everyone but Google drops phones from security patches after a few months). Samsung may not be the fastest to release patches, but they keep those patches rolling out solidly month after month for several years after phone release, even if they aren't all that great about major Android updates. There are few manufacturers, honestly even including many prior Google lines, that can make that claim.

We can agree to disagree on them staying on top of it. .

 

[Note8uzer]

Samsung and AT&T suck **** for update. No security updates and nothing about Orio being updated.

 

[jimd1050]

YEAH, they're wrong. You need to contact Samsung and tell them how it is. Probably should return your Note 8 and then boycott them. I can't say that we'll rally behind you, but we will be using our Note 8's to await an update from you on your progress. Good luck on your mission.

 

[andrewg13]

And now a new WiFi vulnerability that needs a patch.

https://arstechnica.com/information...l-leaves-wi-fi-traffic-open-to-eavesdropping/

 

[natehoy]

And now a new WiFi vulnerability that needs a patch.

https://arstechnica.com/information...l-leaves-wi-fi-traffic-open-to-eavesdropping/

That one will probably make it to November at best, possibly December. Fortunately, like BlueBorne, it's an "in range" attack, so at least that helps limit it.

Also, fortunately, it's much easier to protect yourself against. Run a VPN (I use OperaVPN, but whatever works for you). That way, even if someone does manage to hack your device, all they can do is watch an encrypted stream of gibberish whoosh on by. They'll get bored and move on to a softer target.

 

[Almeuit]

That one will probably make it to November at best, possibly December. Fortunately, like BlueBorne, it's an "in range" attack, so at least that helps limit it.

Also, fortunately, it's much easier to protect yourself against. Run a VPN (I use OperaVPN, but whatever works for you). That way, even if someone does manage to hack your device, all they can do is watch an encrypted stream of gibberish whoosh on by. They'll get bored and move on to a softer target.

While that band-aid does work .. I would rather just get the patch quickly and be done versus guessing on getting it .

 

[natehoy]

While that band-aid does work .. I would rather just get the patch quickly and be done versus guessing on getting it .

100% agreed. And the Note 8 will probably get it by December, most likely. But between now and then, it's certainly not a great solution but it'll keep you a little safer.

The only protection against BlueBorne is to turn off Bluetooth (presumably even the "use Bluetooth to help with location even if it's off" feature that a lot will miss. You can also turn off WiFi, but at least there's a middle ground with this one - using WiFi but scrambling the data someone could intercept.

 

[dejanh]

100% agreed. And the Note 8 will probably get it by December, most likely. But between now and then, it's certainly not a great solution but it'll keep you a little safer.

The only protection against BlueBorne is to turn off Bluetooth (presumably even the "use Bluetooth to help with location even if it's off" feature that a lot will miss. You can also turn off WiFi, but at least there's a middle ground with this one - using WiFi but scrambling the data someone could intercept.

Can't use Wi-Fi any more either with the KRACK exploit

 

[galaxyfive]

My Note 8 is still on the August 1 patch level - has anyone gotten any later security updates?

If Samsung thinks they can sell this thing at 1000$ and then not issue at least basic Android security patches, they're wrong.

It doesn't make it acceptable but Blackberry powered devices have trouble staying current as well. I know they're different tiers of devices, I understand that. I personally think it's the version of Android that is making it harder for the manufacturers to keep current with security updates.
My S7 was actually getting security updates way ahead of the dtek60 ...so Samsung was working at it.

 

[texn884]

How about this my LG V20 is still on December 2016, how could anything go bad with this tip top security LG gives it customers?? WTF, keeps me leary of the V30 I may just go back to BlackBerry

 

[Sam_Gs7]

My Note 8 is still on the August 1 patch level - has anyone gotten any later security updates?

No worries if other users got it you'll too, just be patient
your device is protected - With the current security patch
and I understand you cited the phone price as
additional support to your question

 

[andrew_ackley]

IMHO, Samsung's record on updates has always been poor. I've owned them in the past and my wife runs nothing but.

My Sony Xperia X got the October 1 patch on like Oct 4. It debuted on Marshmallow and is slated for Oreo. If fast and regular updates/upgrades are a priority I would never recommend Samsung phones or tablets for that, even the top tier models. Many OEMs trounce them in this regard month in and month out.

I'm on unlocked direct from Samsung on August as well. Lame.

 

[Carraser23]

Coming from the Pixel, security updates are so overrated. Plus doesn't Samsung at least keep Knox updated?

 

[Almeuit]

No worries if other users got it you'll too, just be patient
your device is protected - With the current security patch
and I understand you cited the phone price as
additional support to your question

That's not the current patch. It's October. August was 1 and a half months ago.

 

[Sam_Gs7]

That's not the current patch. It's October. August was 1 and a half months ago.

Just to clarify and quote "Your device is protected-With your current security patch"
what I meant was this: The OP phone still protected with his August patch :-[

 

[Almeuit]

Just to clarify and quote "Your device is protected-With your current security patch"
what I meant was this: The OP phone still protected with his August patch :-[

Well with patches up to August, yes. September and October ? No.