Google Isn’t Fixing Some Old Android Bugs

http://blogs.wsj.com/digits/2015/01/12/google-not-fixing-some-old-android-bugs/

by anorborg • 12 years ago

87 69 12 years ago

blogs.wsj.com

jaxbot• 12 years ago

Reminds me of the Android File Transfer bug that disables MacBook keyboard/trackpad if the phone is locked. It was recently marked as "obsolete", despite all Android documentation (and even software on the phone) suggests the user use it, and the bug still exists on Lollipop:

https://code.google.com/p/android/issues/detail?id=39548

I don't really understand how this has slipped through the cracks; Google has a decent number of MacBooks in their offices last time I was there, so maybe copying files just isn't popular? Either way, it's a pain that the tool is closed source and the maintainer won't maintain it.

lnanek2• 12 years ago

I've found Android File Transfer rarely even works for me nowadays. I ended up paying for a third party app called SyncMate, but it works flawlessly and even restores the ability to mount the phone and have everything just work easily instead of the broken media transfer protocol Google is trying to force on everyone.

habosa• 12 years ago

Wow thank you for pointing this out. I couldn't figure out why once in a while AFT would completely screw my Macbook. You're my hero of the day.

Karunamon4• 12 years ago

That covers roughly two-thirds of the billion-plus Android devices in use, according to Google

Wow. How is this even remotely acceptable? I get that they want to focus on the latest and greatest, but leaving 2/3 of your users out in the cold, in 2015's security climate is absolutely insane!

Nevermind the fact that upgrading is a non starter for most users.

alwaysdoit• 12 years ago

From what I can tell, it doesn't affect Chrome, which is compatible with 4.3 devices. It's just a bug in the default browser, which they stopped working on a long time ago.

sanxiyn• 12 years ago

Isn't it a bug in the default browser and WebView, which affects every single application using WebView?

Mithaldu• 12 years ago

Maybe they are hoping they'll be able to force ISPs to release upgrades for phones, since that's what's stopping the upgrades, not unwillingness by the users.

Karunamon4• 12 years ago

I don't think that's a play that will work. Considering that with the basic apps, the buck stops with Google (they could push something out via the Play store), it's all on them for refusing to support.

acdha2• 12 years ago

The problem is that Google can't force phone vendors to support old devices or carriers not to slack on allowing them. Suppose they did release a patch for 4.3 – how long would it take for the phone vendor to update their custom UI value-subtraction patches, package a release, test it, ship it to the carriers, who will do their own branding and testing, etc?

This only applies to old devices so the manufacturer sees it as pure cost unless many people get exploited so badly that they will never buy a new model again; similarly the phone carriers only consider this a problem if you leave your contract – and given that the most likely reaction is “Android sucks – I'm buying an iPhone” or “Verizon/AT&T/etc. sucks – I'm switching to the other one” they obviously haven't been feeling much pressure to change.

What we need is a legal fix to avoid them punting the costs onto customers: e.g. not shipping security updates within, say, two months requires the carrier has to unlock your phone and release any remaining contract without penalty. Unless it affects revenue, they're going to continue to treat support as a cost-minimization exercise.

Fargren• 12 years ago

Couldn't they have the Play Store and/or Google Play Services not work on unpatched devices? That would probably force carriers to update.

AshleysBrain• 12 years ago

You could argue Google have already fixed the bugs - in Android 4.4 and newer - and that it's the carrier and manufacturer's responsibility to issue those updates. In many cases even if Google issues a patch, carriers and manufacturers don't bother to issue an update for their own devices. So is Google really entirely to blame here?

ska• 12 years ago

It's a bit of a strange relationship:

The manufacturers can't insist that google support older versions with proper patch releases for bugs like this, because they aren't paying for it.

On the other hand, google really can't expect to drive the manufacturers test & release cycles. I expect that even a minor release is an expensive testing effort on their part, so they are understandably reluctant to do this off cycle.

I think this is the point of some of google's recent changes, but it's unclear how well that will work in practice.

hrjet• 12 years ago

As they say: you can't have your cake and eat it too.

If Google takes credit for those phones and stamps its logo of approval on the phone, they need to take the blame for the consequences.

higherpurpose• 12 years ago

Google really needs to figure out how to keep Android phones updated, preferably for 3 years, because I think that's how much most people keep their phones.

The biggest problem Google is facing regarding that is the fact that essentially every OEM creates its own "distro" of Android, which makes it very hard for Google to fix everything. Some of the bugs could be in software of those OEMs.

I think Google should build-in deeper customization frameworks that allows OEMs to customize the OS quite a lot, while still doing it in a "standardized way" that would allow Google to fix the problems.

In a way Google chose this. They could've done what they did with ChromeOS - make Chromium OS open source, but only promote Chrome OS, which is why all OEMs choose the proprietary Google version instead of the open source one. That's how Android should've worked as well. But they probably thought of this too late.

cwyers• 12 years ago

The thing about all these counterfactuals that people come up with for how Android should've been done is, if Google HAD done them, what would the market for smartphones looke like now? We don't know. It's possible (I think it's probably likely) that all the compromises and concessions Google made with the carriers and manufacturers are part of why Android has the market share it does. Google was playing catch-up with Apple, it's not like they had the luxury of time.

Someone1234• 12 years ago

Google has figured out a way and are slowly deploying it...

When people talk about Android updates that can include several things:

- Launchers

- Apps (e.g. Camera, Browser, Calculator, and so on)

- Operating system components (services, drivers, etc)

- Linux kernel

A normal Android update has the ability to update all of the above. However most of the user-impacting and security impacting issues are at the "apps" level (since Android apps are largely isolated from the underlying OS via a Java-like VM).

So what Google have been doing is leaving the Kernel and OS components to the OEMs and providing app updates via the Play Store even onto older devices. So now on the Play Store we have:

- Chrome (replaces Browser)

- Google Services (updates a large chunk of APIs)

- Google Search (more APIs, Google Now, and so on)

- Google Voice (more APis, etc)

- Google Keyboard (built in keyboard)

- Gmail (will replace email eventually)

- Google Launcher

- Google Calendar

- Google Camera

- Google Talkback, Text-To-Speech (accessibility)

- Google+ (replaces SMS Messenger)

And so on...

JohnTHaller• 12 years ago

Unfortunately, Android device manufacturers have no obligation to update their old devices. Many that only support 4.2 or 4.3 haven't even pushed out the latest updates with the security fixes to those versions.

This is one reason the latest Android releases don't have a 'Browser' app and have Chrome as the default (as they should). Granted, some manufacturers probably still have 'browser' because they want more control over their users.

notatoad3• 12 years ago

From 5.0 forward, there is no "browser" that isn't chrome. The system webview is the chrome rendering engine and receives updates through the play store. If an OEM wants to ship their own browser to retain control, it's still chrome underneath, just with some custom UI.

(this was also true in 4.4, except that the 4.4 webview doesn't receive updates other than via a full system update)

on_and_off• 12 years ago

Correct me if I am wrong, but this seems to be a bug in the default browser, which was not updatable. Android now uses Chrome as its default browser, and it is automatically updated when you activate your terminal. Same thing for the new Chromium-based webview. The solution is to update the terminal to a new version of Android and yes this is not without issues.

hiphopyo• 12 years ago

I guess web and app developers can start slowly by just blocking older versions of Android:

http://ruby-journal.com/how-to-block-old-ie-version-with-rai...

Karunamon4• 12 years ago

You're getting voted down, but this is quite true. Having ancient unpatched devices out there doing things is a menace to anything those devices share a network with.

It's in pretty much everyone's best interests to make those devices as non-functional as possible as fast as possible.

anorborg• 12 years ago

I think the eventual solution will be a software subscription fee that ends up going to the carriers. They are motivated to get people to upgrade their phones right now, and unless they are legally obligated or financially compensated, I doubt they will change their practices to enable people keeping their phones.

jpollock• 12 years ago

There used to be hardware rental and line maintenance charges in fixed line phone networks. There still are in cable networks. It's just another source of revenue, and it doesn't encourage software updates.

_lce0• 12 years ago

On Argentina, carriers usually block software updates so your phone gets "old" and they can sell you a new one, with a more expensive plan because you know this new phone requires a bigger plan, the one you already have doesn't fit

that's all they care about, you paying them.

ufmace4• 12 years ago

As I remember it, most of these critical bugs are in the Android browser, which is considered a core part of the OS in those versions. The trouble with that is there's no way to update it without doing all the work of a whole OS update, including the usual mess of getting approval and merging changes from device manufacturers and local carriers.

It seems more understandable that way that Google told them to just upgrade to a newer Android version instead.

outside12343• 12 years ago

Maybe we should give them a 90 day deadline to fix them.

cheald2• 12 years ago

Or what, you'll disclose them?

magicalist2• 12 years ago

I doubt the carriers would care. There have been a bunch of published exploits that haven't motivated them to push updates.

Shog9• 12 years ago

If you can figure out a way to make phone manufacturers and mobile service providers care about any kind of deadline for updates, you'll be doing the world a great service.

andyrj• 12 years ago

Do we really need to make all threads with any relation to Google about the whole "90 days vs. Patch Tuesday"?

ufmace4• 12 years ago

Enforced how, on who, by whom? Google can say "They're fixed already, just upgrade to Android 5.0.1". Manufacturers and Carriers can say "Meh, we're still testing it". Enforcing such a rule requires holding a particular party responsible, and that party must have some authority to hold other involved parties responsible for doing their parts.

Probably the best thing that could be done overall is Google's already-complete plan to move the web browser, and as much other code as they can, to Play store apps that they can centrally auto-update. But getting that solution onto the vulnerable phones required them to, once again, just upgrade to the newest Android.

xorcist• 12 years ago

No, this is and should be Google's problem. Carriers have no say expect in certain markets, and hardware manufacturers do what Google dictates. The requirements to carry Google Play is pretty steep, and there should be consequences for not following the agreements.

I bought a Nexus One, and one a half year later it was insecure with no updates. That can never be acceptable. If Debian can ship updates for a five year old distribution, I'm sure Google can. Android is slim by comparison.

amaks2• 12 years ago

How come it's a Google's problem if the browser in question is part of AOSP, and therefore could (and should) be updated as any other open source project. Google may be able to fix those bugs, but doesn't have to.

frederickf• 12 years ago

Regarding the Nexus one that's surprising and disappointing. I was under the impression that the Nexus line used vanilla android (no device manufacturer or service provider customizations) and would be update-able as long as the hardware could handle the new OS.

Zigurd2• 12 years ago

Chrome is available for Android 4.0+ which amounts to 85%+ of Android devices in the installed base, according to https://developer.android.com/about/dashboards/index.html

It's a non-issue, as with other bugs Google recently closed as NTBF.

aroberge• 12 years ago

These stats are based on people visiting the Google Play store. They are almost meaningless.

I have an Android phone that works perfectly well and is paid for; I don't have money to burn to buy a new phone. I got it after I bought a Windows 7 computer - which will likely be updated for many years to come. When purchsed, the phone cost almost as much as my computer did. However ... the phone is running version 2.3.3 and can not be upgraded (and has not been updated for a few years now). And most new apps do not support this Android version (and have not for a few years now) so I have given up on visiting the Google Play store. My wife has an identical phone and has not bothered either trying to get new apps for a few years now.

It's a "non-issue" only because Google (which I generally support) has a shitty policy when it comes to supporting old versions of their products.

Zigurd2• 12 years ago

Statistics based on visits to the Google Play store are certainly not meaningless. If you have a Kindle device you don't have this problem. Or, if you have a phone in China that's AOSP-based but using a Chinese portal's ecosystem you are probably running their browser.

That leaves you among the small percentage who are in the Google ecosystem, but running an old version of Android. perhaps it was Google fault for OK'ing Google logo devices with trailing-edge OS versions when you bought your phone. But they've fixed that now with Android One and the inexpensive Moto phone.

And, on top of that, if you really want a newer version of Android without buying a new phone, there's a decent chance that CyanogenMod or other aftermarket releases support your device. Google has never stopped anyone from "bootlegging" the Google ecosystem into such configurations.

notatoad3• 12 years ago

The stats are reported by google play services running on your phone, not by actual visits to the play store. As long as your phone can access the play store, it gets counted.

richm44• 12 years ago

Actually normal support for windows 7 ended this month. You're only getting security updates for that now, not new features.

Google Isn’t Fixing Some Old Android Bugs

Related Stories