Take the 2-minute tour ×
Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. It's 100% free, no registration required.

I'm new to Android and I'm thinking about buying an entry-level Android device.

Yesterday I read that Android passwords are stored in plain text. That got me to thinking... how do Android devices get security updates? I know that OS upgrades aren't available to every Android phone, so I was wondering how vulnerabilities like these will be patched. Does it depend on the goodwill carriers?

share|improve this question
2  
Please note that the plain text passwords in Android are no different from any other email client that uses standard protocols (IMAP/POP3). They have to store the password in order to function. That's even explained in the article you link to. Still: good question. –  Joachim Sauer Jul 26 '11 at 11:03

1 Answer 1

up vote 0 down vote accepted

Android updates are given three basic classifications: major, minor, security. (I'm looking for a source for this, but I've been unable to find it thus far.)

Security upgrades, at least, are supposed to be part of the core code and have the least disruption to customizations the carrier and/or manufacturer have made.

However, it's still up to the carrier and/or manufacturer to take the update and incorporate it into their particular flavor of the OS. Some are better at it than others.

share|improve this answer
    
Hmm, I had gotten the impression that some security updates were pushed out without manufacturer/carrier participation ... similar to how they push out updates for the Market. Can't find any references though. –  Matthew Read Jul 26 '11 at 14:18
    
For particular apps, sure. –  Al E. Jul 26 '11 at 14:47
    
Yeah, I thought the Gingerbreak exploit was fixed with a pushed-out update but it looks like I was confused. –  Matthew Read Jul 26 '11 at 14:52
    
What if you're on a small carrier that doesn't pay any attention to the Android platform? Will I be able to install updates in that case? And why does the manufacturer have to be involved in the Android upgrades? Why can't you just install the latest version of "vanilla" Android no matter which phone you have? –  Pieter Jul 27 '11 at 9:34
    
@Pieter: Because it just doesn't work that way. Even the "Google Experience" phones needed to work with the carriers and manufacturers to get an update out when it was done. Granted, it took less time, but carriers and manufacturers have their own customizations to Android that need to be cared for. Microsoft has tried to avoid that with their very strict hardware requirements, but even so Windows Phone updates don't get out to everyone right away. –  Al E. Jul 29 '11 at 16:29

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.