• NaibofTabr@infosec.pub
    link
    fedilink
    English
    arrow-up
    19
    ·
    1 day ago

    the company will keep publishing security patches each month on a dedicated security-only branch for relevant OS releases just as it does today

    Ok, so this is mostly going to affect new feature releases. It might not be a bad thing really, as it will be easier for downstream projects to keep up with a 6-month release cycle.

    • boredsquirrel (he)@slrpnk.net
      link
      fedilink
      arrow-up
      9
      ·
      1 day ago

      So GrapheneOS and any other OS that cares a bit about security need to ship proprietary updates.

      And if this is everything of 6 months, this is pretty insane

      • ramble81@lemmy.zip
        link
        fedilink
        arrow-up
        5
        ·
        24 hours ago

        Security updates are still monthly. It’s only the feature updates. Are you really that enthralled with ensuring you have the latest feature updates every 6 months?

        • boredsquirrel (he)@slrpnk.net
          link
          fedilink
          arrow-up
          4
          ·
          23 hours ago

          So security updates are open source? Not like security preview releases that are under embargo?

          Well that makes it less problematic. Android apps are independent from the core OS and half of the people is running old versions, so the ecosystem doesnt really depend on the latest and greatest.

          Still shit, but less bad.