Re: To adults - very few on this newsgroup - like badgolferman - what do you think of the facts?

Chris wrote on Mon, 20 May 2024 09:43:04 -0000 (UTC) :

Andrew <andrew@spam.net> wrote:

Chris wrote on Wed, 15 May 2024 17:12:35 -0000 (UTC) :
 

<https://www.androidheadlines.com/2022/01/google-monthly-changelog-play-system-updates.html>
"Google System updates, meanwhile, are fully automated. Originally
referred to as Project Mainline, these updates fix bugs discovered
in various OS components like device connectivity, location services,
media services, Emergency alerts, and others."

 
But does it patch every exploit in android which is what you claim Apple
does do? Having lots of updates on *some* things is pointless.

 
Chris,

 
Answer the question.

I responded to every one of your questions, Chris (see below), as if
you own the same adult capacity to comprehend details as I do, Chris.

In addition, after I spent a while documenting the answers for you,
Chris - which I expect you to read and understand every cite below
before responding, I posed a question for you in the last line of
this missive. *Please see the last line for a question for you.*

Just as Microsoft doesn't patch Firefox bugs, Android has a system for
updating all the apps (it's part of the Google Play Store setup, Chris).

Just as Microsoft has a monthly Patch Tuesday, Android has a monthly patch
of every single Android device on the Internet (older than version 4.4).

And for platform specific bugs, Samsung and Google have full support for
seven years now - which includes all operating system updates during that
time frame (it could be as many as seven major releases, Chris).

Do you understand any of that, Chris?

Many apps also won't be updated if they're on old versions of android. So
again partially patching android 4.4 is pointless.

 
What you do not understand is the non-Google apps are updated separately.

 
I absolutely know that, which is exactly the point. Non- google apps refuse
to update their apps on obsolete versions of android. So Google supposedly
updating some parts of Android 4.4 is a waste of time.

Again, I will speak with you as if you're an adult, Chris.
Even though this has been explained on this group umpteen times already.

All non-Google apps are updated by their developers, Chris.
Just like non-Apple apps are updated by their developers, Chris.

The non-Google apps are automatically updated, by default, on Android, by
the Google Play Store update mechanism. Since I use a clone of the Google
Play Store (which doesn't require me to create a login on the phone), my
Play Store clone also updates all the non-Google apps automatically.

This is one update mechanism that is exactly the same on *all* common
consumer operating systems, Chris. I'm sure even iOS & macOS do that.

That's way more updates than Apple gives you Chris.

 
I thought more was bad? Every time there's an ios update, you rave on how
bad apple is at testing things. So android updates = good and apple updates
= bad. Got it![1]

 

 
Answer the question. Is the frequency of android updates a good thing?

Yet again, I will answer assuming you own adult comprehensive skills.
Even though this has been explained on this group umpteen times already.

What matters is that Apple devices always have more known exploits than
Android and that iPhones always have twice as many zero-day holes, Chris.

What also matters is Apple updates iOS as an "almost monolith", where only
in iOS 16 did Apple begin to start the process of modernizing updates.

Until iOS 16, if a single line of code changed in iOS, Apple had to build
an entire new release stream - which - of course - is an idiotic way of
sending out hotfixes.

Only in iOS 16 did Apple begin to learn how to use modern systems of
patching such that an entire release didn't have to be built if only a
single line of code had to be patched.

I'm sure you know none of this, Chris, yet we've discussed this on this
newsgroup since RSR mechanisms were first advertised back in iOS 15 days.
<https://support.apple.com/en-us/HT201224>

There's a reason I call you religious zealots ignorant, Chris.
 
a) You show zero evidence you read the cites that badgolferman did
b) Worse, you show zero evidence that you understood them.

 
I have shown you the evidence several times. The fact you chose to snip it
rather address it, speaks volumes regarding your wilful ignorance.

Chris,

This is why I call you Apple religious zealots what I call you.

I answered all your questions so many times that I can't even count how
many times I've explained on this very newsgroup how Apple is the only
common consumer operating system vendor who does things this strange way,
and as a result, iOS is exploited far more than Android is exploited.
 <https://www.cisa.gov/known-exploited-vulnerabilities-catalog>

There's a reason I dumb answers down most of the time for you Apple zealots
as it doesn't matter how many times I explain how iOS and Android update
differently, you are too ignorant and uneducated to comprehend anything.

Notice badgolferman even took fifty times to understand it, given we've
discussed this topic at least fifty times on this newsgroup, Chris.

But he at least understood it in the end as shown in this very thread that
he read the cites which show Apple has never fully supported more than one
release at any given time - which only Apple does. Nobody else does that.

The evidence is two-fold: 1) Apple updates older versions of ios very
regularly, 2) ios support of older hardware is *years* longer than Google
or Samsung. Their new policies will only come into reality i'm a few years.

Read the references, Chris. These are facts. Not trolls.
 <https://www.cisa.gov/known-exploited-vulnerabilities-catalog>
 <https://screenrant.com/apple-product-security-update-lifespan/>
 <https://support.apple.com/guide/deployment/about-software-updates-depc4c80847a/>
 <https://hothardware.com/news/apple-admits-only-fully-patches-security-flaws-in-latest-os-releases>
 <https://arstechnica.com/gadgets/2022/10/apple-clarifies-security-update-policy-only-the-latest-oses-are-fully-patched/>
 <https://www.cnet.com/tech/mobile/samsung-extends-android-and-security-updates-to-7-years/>
 <https://www.tomsguide.com/opinion/google-pixel-8-software-updates>
 <https://www.androidheadlines.com/2022/01/google-monthly-changelog-play-system-updates.html>

You live in the past. That last thing you heard about Apple was from Jobs.

The fact is Apple only fully supports one release only.
No other operating system vendor has support that sucks that bad.

 
It's an acceptable model when all supported hardware can run the most OS.
You wouldn't expect anyone to keep a 386 up-to-date? Maybe you would.

 

 
Answer the question!

One more time I'm going to respond to you as if you're an adult.
That means you need to read and undersand the response, Chris.

If you can't do that, you don't own adult comprehensive skills, Chris.
Especially for someone who claims to have a PhD in the life sciences.

My Windows desktop was built in 2009 and it's still running a fully
supported operating system that has all known bugs patched, Chris.

My non-Microsoft apps and drivers are fully patched too, since I have
programs that handle the patching for me, Chris, such as UCheck,
VulnDetect, PatchMyPC, WingetUI, UpdateHub, Chocolatey & Scoop
(in addition to Sumo/Dumo which were deprecated late last year).

Looking at my updaters on Windows, here they are in alphabetical order...
 C:\> cd C:\software\updaters\.
 C:\> mkdir {chocolatey,patchmypc,scoop,ucheck,updatehub,vulndetect,wingetui}

 *chocolatey* v2.2.2
 "Chocolatey is the package manager for Windows (like apt-get for Windows)"
 <https://chocolatey.org/products/#foss>
 <https://chocolatey.org/install>
 <https://community.chocolatey.org/>
 <https://community.chocolatey.org/packages>
 <https://community.chocolatey.org/packages/chocolatey>
 <https://packages.chocolatey.org/chocolatey.2.2.2.nupkg>
 Name: chocolatey.2.2.2.nupkg
 Size: 5243268 bytes (5120 KiB)
 SHA256: 4E1ACBDAC571719F90B2566566668C448A20074E7C2E3FAA37251C62AF4EFD86

 *patchmypc*
 "Simplify third-party patching on your home PC"
 <https://patchmypc.com/home-updater#download>
 <https://patchmypc.com/freeupdater/PatchMyPC.exe>
 Name: PatchMyPC.exe
 Size: 2596472 bytes (2535 KiB)
 SHA256: D5A2DDBA0EE5C577268D69BBC129046D48F36C8306C8A57D4F6B2E2DED193202

 *scoop*
 "Scoop is a command-line installer for Windows."
 <https://github.com/ScoopInstaller/Scoop>
 <https://www.makeuseof.com/windows-install-scoop/>
 PS:> iwr -useb get.scoop.sh | iex
 Running the installer as administrator is disabled by default,
  see https://github.com/ScoopInstaller/Install#for-admin for details.
 PowerShell requires an execution policy in [Unrestricted, RemoteSigned, ByPass]
  to run Scoop. For example, to set the execution policy to 'RemoteSigned'
  please run 'Set-ExecutionPolicy RemoteSigned -Scope CurrentUser'.
 PS:> Set-ExecutionPolicy RemoteSigned -Scope CurrentUser
      Initializing...
      Downloading ...
      Extracting...
      Creating shim...
      Adding ~\scoop\shims to your path.
      Scoop was installed successfully!
      Type 'scoop help' for instructions.
 PS:> scoop uninstall scoop
      WARN  This will uninstall Scoop and all the programs that have been installed with Scoop!
      Are you sure? (yN): Y
      Removing ~\scoop\shims from your path.
      Scoop has been uninstalled.

 *ucheck*
 "Free,Scan,Install Updates,Uninstall Software,Personal Use Only:
  <https://www.adlice.com/ucheck/>
  <https://download.adlice.com/api?action=download&app=ucheck&type=setup>
<https://cloud.adlice.com/owncloud/index.php/s/zhvgtK8oXyJ6Gru/download?path=5.0.3&files=UCheck_setup.exe>
  Name: UCheck_setup.exe
  Size: 31352920 bytes (29 MiB)
  SHA256: A9A841480CC0850174FEF45F50C2B5D4B75DF97A2E0EF22B4EB25C65B86391AC

 *updatehub*
 "UpdateHub simplifies the process of updating software on your computer."
 <https://ghacks.net/2023/07/24/update-all-windows-programs-with-updatehub/>
 <https://www.neowin.net/software/updatehub---quickly-update-os-and-software-apps/>
 <https://www.neowin.net/software/updatehub-210---simplified-pc-software-updates/>
 <https://github.com/KK-Designs/UpdateHub/releases>
 <https://github.com/KK-Designs/UpdateHub/releases/download/v2.2.3/UpdateHub-x64.exe>
 Name: UpdateHub-x64.exe
 Size: 69234472 bytes (66 MiB)
 SHA256: 80A081B63FAC71E96930C24C342ED51A184E9BCA964633D7D898B07B82F90B92

 *vulndetect*
 "An alternative to the long lost Secunia PSI"
 <https://www.zdnet.com/article/finding-a-software-updater-to-replace-secunias-psi/>
 <https://vulndetect.org/>
 <https://vulndetect.com/dl/secteerSetup.exe>
 Name: secteerSetup.exe
 Size: 2180544 bytes (2129 KiB)
 SHA256: 2A7F91BA248637F26D3CC5976F4456D245427D50D05EB466541A4E3666211E19

 *wingetui*
 "A user interface for the most common CLI Win10/Win11 package managers."
 <https://www.marticliment.com/wingetui/help/install/>
 <https://sourceforge.net/projects/wingetui.mirror/>
 <https://github.com/marticliment/WingetUI>
 <https://github.com/marticliment/WingetUI/releases>
 <https://github.com/marticliment/WingetUI/releases/download/2.1.1/WingetUI.Installer.exe>
 Name: WingetUI.Installer.exe
 Size: 63997848 bytes (61 MiB)
 SHA256: 1EE9C17C2C8C1A16EC7F83DFF61CFCBA83A8F6164E0C6490D93042D76FFC73AA

In summary, I responded to your queries in a level of detail that assumes
you have the capacity to comprehend the answers to your questions.

Now I have a question for all of you Apple iPhone owners.

Why is the iPhone always caught with more zero-days & exploits than Android?