Android Security Team speaks about recent updates

[refused9150]

Google has started revealing details about the security flaw they patched in recent updates for the T-Mobile G1. Rich Cannings of the Android security team has come fourth to reveal details about the RC29 and RC30 update that Google has not previou... Read more

[LGSilva]

So you guys think if we have this "serial" thing attached we can get root access back?

[rex2745]

oh no theyre gonna steal my grandmas banking cookies

[Karolis]

Did Google just say they don't give a sh*t about UK users? I still haven't received a single update from them, and now they are giving out the bug details. Nice...

[MobileMan]

I havent got any updates either.

[tymewillcome]

I reciieved both updates by restarting my phone with the wifi already on...Nothing noticeable, but i MUST ADMIT THE BATTERYY LAST ALOT LONGER! woohoo

[endmp25]

To UK users: I read in an article... Google makes the update and distributes them to your service provider and then they randomly choose who will get the updates. So if Google already made the update it is your service provider which is the one taking their sweet time.

Back to the thread... I'm glad they don't disclose the nature of the problem until it has been fixed... why? Recent events... for example...

Microsoft sent out an update that causes the wallpaper to change to an image saying "Please purchase a official version of XP..." (Says something to that effect in different languages) on pirated versions of their OS...

Then a couple weeks later... there was articles written about a recent disclosure of a security issue found in Microsoft OS software.... the articles explained in detail what happened and where to get the update... What do you think happened next?

Some of those people who use the pirated version happen to be hackers (anyone surprised there?) Well what they did in retirbution to the recent events is used the info in the articles and dissected the update to figure out what the flaw was... then created a virus that would take advantage of that security issue on computers that did not get the update...
Basically Microsoft pissed off a lot of people and then the people found a way to retaliate because of the disclosures...

This is actually really recent... within the last two months...
So with this is mind I can understand why Google chose to do things this way... I would prefer it actually... Those who do not learn from past mistakes are bound to repeat it...

[VladNYC]

Guys, ever since i got my G1, i didn't receive a single update? May i know , why?

[grenness]

To UK users: I read in an article... Google makes the update and distributes them to your service provider and then they randomly choose who will get the updates. So if Google already made the update it is your service provider which is the one taking their sweet time.

I am nearly 100% certain this is not the case.
Neither are the suggestions that the update is transmitted via a text message.

Most probably, the phone itself checks with a Google server once every XX hours to see if there are any updates or other "info".
I have an unlocked G1 on a Norwegian provider who has no clue whatsoever that I am using a G1 on their network.
I received the RC30 update this morning (Central European Time).
I don't know if there are any tricks you can do to try to "force" the update to arrive, but when I got to bed last night I rebooted the phone (turned it completely off and on) and left it on my desk, plugged into the power cord, and with wifi on. When I woke up, the message about "an update is ready" (or something like that) was on the display.
I have used the phone for 6 days, and was until today on RC19.

~Christopher

[endmp25]

To UK users: I read in an article... Google makes the update and distributes them to your service provider and then they randomly choose who will get the updates. So if Google already made the update it is your service provider which is the one taking their sweet time.

I am nearly 100% certain this is not the case.
Neither are the suggestions that the update is transmitted via a text message.

Most probably, the phone itself checks with a Google server once every XX hours to see if there are any updates or other "info".
I have an unlocked G1 on a Norwegian provider who has no clue whatsoever that I am using a G1 on their network.
I received the RC30 update this morning (Central European Time).
I don't know if there are any tricks you can do to try to "force" the update to arrive, but when I got to bed last night I rebooted the phone (turned it completely off and on) and left it on my desk, plugged into the power cord, and with wifi on. When I woke up, the message about "an update is ready" (or something like that) was on the display.
I have used the phone for 6 days, and was until today on RC19.

~Christopher

I really do appreciate your comment... but I don't believe your certainty is 100%, it is very possibly we are both right.

Google writes the patches but relies on T-Mobile to disseminate them to its customers and to communicate with its customers, said Rich Cannings of Google's Android security team.

Here is the CNET NEWS ARTICLE

This is the case here in USA... As for anyone using a "jailbroken" phone I've read you must do the "modified" manual updates... It is entirely possible that it is different for UK... you may have recieved the update because it is linked to your gmail accout so it is entirely possible that Googles servers stepped in...

If google is smart they would offer the update in multiple ways... especially if some Andoird phones may come to the household market without a service provider but a required WIFI or Lan line... So good observation.