Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> It definitely is, an OS is as secure as consumers get to use it, not a some experimental lab in Mountain View.

"my parents pockets" isn't an experimental lab, I don't think.

> So if Google doesn't care what the OEMs do with Android

I don't think I said this.

> That isn't caring about security, what Apple does, it is caring about it.

Open ecosystem, maximally secure ecosystem, pick 1. Android offers equal security to iOS if one chooses to pursue it. That most OEMs don't give a shit about security reflects badly on those OEMs, there's only so much any software provider can do.



Let me correct it for you, from those of us that aren't attached to Google.

"That most OEMs don't give a shit about security reflects badly on Google security polices".

Google can go ask Microsoft how it does make OEMs play by the rules, or legal about how to properly write contracts that enforce such security practices.

Until it happens, how secure a Pixel device might be in theory and Google blog posts, isn't representative of the Android that 90% of the world actually gets to use.


> Google can go ask Microsoft how it does make OEMs play by the rules

OEMs of what? All the custom forks of windows floating around? The mobile device market doesn't work anything like the deskop market, and you know that.

Unless you're suggesting that the drivers for the networked, LED-light-toting hyper-gaming mouse you can get from Razer is more secure than OEM Android, because that's the closest things I can come up with, and it's laughable.

We're well off track though, the original question was if there was a more secure (implied consumer) os. You mentioned two non consumer OSs, so I think it's safe to say that the answer is no.


OEMs of Windows Phone for example.

My Windows 10 devices still get more security updates than a couple of Asus Android ones I have here lying around about the same age.

You are the one moving the goal posts to consumer OSes, in a failed attempt to protect Google's security story.

Well, if you want to go that way, then iOS has definitely a better security story than Android ever will.

Every iOS powered device has the same security hardware, and update story regardless where in the world it gets bought.

Android, well better have luck with the OEM device, despite what gets written in Google blog posts and demoed at IO.


Then, to use your own example, why do brokers pay more for Android zero days?


Because it has 80% of the market share world wide, so any flaw makes it more worthwhile, specially given the lack of updates.

Any zero days found in Android devices will never be fixed, other than on Pixel and a couple of selected flagship handsets, while everyone else will be naked with their devices.

Thus brokers will have a gold mine on their hands, being able to target thousands of devices without their owners being able to protect themselves, just like Windows XP before SP2 was released.


Sou you agree that more people are looking at Android than at clearpath, and so the number of zero days found isn't necessary representative of the implicit security, but instead is also a function of interest, which is what I said like 8 posts upthread, and which point you disagreed with it.

I can't tell if you have a point you're making, or if you're just trying to disagree with me :/




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: