wrote:
They don't have the resources allocated to do monthly patch cycles for all of the devices they are trying to support. Unlike custom ROM teams, they can't just apply Google's patches and push out because there's no way to roll back, and no supported backup method. They have to do regression testing against a lot of other code. Can you imagine the grief a bad update could cause? Bricked devices. Lost data.
Not writing this for the benefit of anyone here, only with the slim hope that the PTB may come across this:
Then, if all that is true (and know way of knowing if it is or how much) the least Lenovo-Moto could do would be to make some kind of announcement--prominently displayed somewhere where it can't be missed--along the lines of,
"We understand the concerns of many of our users regarding the KRACK vulnerability. Rest assured, we are currently developing a patch for all affected users, which we will release as soon as possible."
The closest anyone from staff has come to this, as far as I can see, is from 11/02, completely buried somewhere in a thread I found only by doing an extensive search, "We're aware of the issue, and we are developing a plan to address it. However, there is no specific timing to share."
That, instead of letting everyone concerned twist in the wind--exacerbated especially with the thinnest of comments of "senior" contributors here in a Lenovo supported forum such as, "No one here has a date, and moto doesn't provide dates," along with a most patronizing suggestion to visit a site with the most basic, entry level information regarding protecting oneself.
>>Can you imagine the grief a bad update could cause? Bricked devices. Lost data.
And can you image the possible grief an unpatched android phone may cause its user: ransomware, phishing, MiTM attacks, theft of credit card, banking and other sensitive data, etc.? And not askng for a monthly update, just a godamn patch for something that's been known by vendors weeks before its public announcement around mid-October.