FTC Investigating Android Patching Practices

Post Syndicated from Bruce Schneier original https://www.schneier.com/blog/archives/2016/05/ftc_investigati.html

It’s a known truth that most Android vulnerabilities don’t get patched. It’s not Google’s fault. They release the patches, but the phone carriers don’t push them down to their smartphone users.

Now the Federal Communications Commission and the Federal Trade Commission are investigating, sending letters to major carriers and device makers.

I think this is a good thing. This is a long-existing market failure, and a place where we need government regulation to make us all more secure.