c/android · by FragmentedChicken@lemdro.id · 2y

Missing signs: how several brands forgot to secure a key piece of Android

https://rtx.meta.security/exploitation/2024/01/30/Android-vendors-APEX-test-keys.html

40 points · 3 comments · view on lemmy.world

3 Comments

limerod@reddthat.com · 1 pts · 2y (2 replies)

I have the December 5 security patch. Is there still a chance that my device is not secure?

troydowling@lemmy.world · 4 pts · 2y (1 reply)

Give the article a read. Your answer is right at the top.

limerod@reddthat.com · 5 pts · 2y

I asked after reading the article. It mentions December 5 but also has bits about:

November 7th, 2023: Google updates the Partner Security Advisory to add the CVE number and a note that only “builds … claiming the 2023-12-05 SPL or higher” will be subject to BTS enforcement on December 4th

It still leaves an ambiguity if your device is properly patched, today January 31.