Too bad they killed the Nexus line and stopped OS updates a year or two ago. On the bright side, the kernel is old enough to not have the Android binder driver...
New CITL study: Android!
24 Android Releases
14358 binaries
2009-05-01 to 2019-09-01
Coverage of major & minor versions spanning 1.5.0 to 10.0.0
Good news: On Nexus? things are improving.
Bad news: you’re probably not on Nexus 
https://cyber-itl.org/2019/12/16/android-evolution.html …
-
-
-
The study was done on collected OEM images from Android, not tied to a specific product line.
Kraj razgovora
Novi razgovor -
-
-
It's unclear to me why fortify regressed. Based on timing, it's potentially related to the migration from gcc to clang. Moving to Clang came with a lot of other security benefits not reflected in the study (CFI, SCS, UBSAN, ASAN).
-
Potentially a conflict with ASAN?https://github.com/google/sanitizers/issues/247 …
- Još 5 drugih odgovora
Novi razgovor -
-
-
Nexus/Pixel?
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.