Related
Is Samsung treating security seriously? No security patch since January or February for non carrier-branded (unlocked) S7 Phone?
For Galaxy S7 unlocked phone (so the OTA update does not depend on the carrier) Samsung let his customers with no security patch for 4 or 5 months! Here the list of the last security patch released at the beginning of the month of May:
source: http://samsung-updates.com/device/?id=SM-G930F
February Security Patch:
TTR Austria
BSE Belgium
BGL Bulgary
ETL Czech Rep
NEE Finland
XEF France
XEG Germany
BTU IReland
NEE Iceland
NEE Norway
AUT Switzerland
BTU United Kingdom
XEU United Kingdom
January Security Patch:
EUR Greece
XEH Hungary
ITV Italy
PHN Netherland
XEO Poland
TPH Portugal
ROM Romania
ORX Slovakia
SIO Slovenia
PHE Spain
Please upvote my thread on reddit to try to make Samsung changing is security update timeframe:
https://www.reddit.com/r/samsung/comments/68nusi/discussion_is_samsung_treating_security_seriously/
As usual, now they have the S8 out, it will take priority
Please upvote my thread on reddit to try to make Samsung changing is security update timeframe:
https://www.reddit.com/r/samsung/comments/68nusi/discussion_is_samsung_treating_security_seriously/
Some S7 carrier branded devices get April patch:
XSA Australia
VIA Germany O2
TMZ Czech Rep. T Mobile
O2U UK O2
etc...
Samsung can skip one month. But four or five for a company placing a great emphasis on security, is not serious. Even more considering they have the patch available (some S7 get the last security patch) and have no carrier limitation to push it (on unlocked phones).
*Detection* said:
As usual, now they have the S8 out, it will take priority
Click to expand...
Click to collapse
It is a shame
Today smartphones allow payments, bank access, personal data, is used as a security authentication factor (two factor authentication) etc.
Security must be a priority.
Advanced users know how to avoid security threats. It is not the case for the average user.
When you pay a Smartphone more than 600 Euro from a company that claim security has a priority, you can expect to have update in a reasonable timeframe.
That's the Mar update if I remember. I'm still waiting for nougat. About to give up hope of receiving nougat ever
patarchy said:
Advanced users know how to avoid security threats. It is not the case for the average user..
Click to expand...
Click to collapse
Such as? This is a concern for me because I rely heavily on mobile banking and payments.
fullbloom said:
Such as? This is a concern for me because I rely heavily on mobile banking and payments.
Click to expand...
Click to collapse
I also rely heavily on mobile banking for professional reasons. This why I am trying Samsung to push the updates in timely manner.
First of all you have to know the infection vectors. The ways you get hacked.
99,9% of the infections request user interaction. Considering remote threats, is basically opening a rogue web page / link or file (attachment, social network, messaging app) and apps with weak security because poorly coded.
Very few attacks do not require user interaction as stagefright that takes profit of MMS auto retrieving media files by default. Disabling auto-retrieve option in MMS settings keep you safe.
To make you open a link or a file, they will use social engineering (sending an e-mail / message to induce you to click. It can come from one of your contact), attack the DNS so the device do not open the right web page (mainly on not-trust/rogue WiFi access or poorly configured home/office routers).
In addition you have to consider hardware (wifi / bluetooth / NFC) and, as above mentioned, apps weaknesses.
In short, the attack surface is vast. Limit-it as much as possible:
Hardware: Always prefer cellular data connections. Do not (or limit as much as possible) the use of WiFi and bluetooth. If you have to use them, switch them off as soon as you don't need them (also switch off the "improve accuracy" in location settings that allow the phone to scan WiFi and BT even when switched off). The same for NFC.
To mitigate the "software" risk you have to know the actual known vulnerabilities. Have a look to the android security bulletin (https://source.android.com/security/bulletin/). Easier to avoid hackers' tricks when you are aware of vulnerabilities. Most of remote vulnerabilities come from media files (video, audio, images). Configure your app not to download them automatically. Whatsapp --> Media auto-download, emails --> disable show image, etc. Use firefox and install No-script add-on.
Limit the apps you install. Prefer widely used one from recognized developers. After using it, just close them (you can automate this with Greenify)
Disable system app that ease sharing / connection with other devices (Wifi direct, nearby device, S Beam, withTV, Mirrorlink, quick connect etc) you do not need​
You may also secure the gmail account on which your device depends on with two factors authentication. Better practice to use a dedicated gmail account just for the device.
Do not forget the basics: Password protected device, update apps and os, do not download apps outside google play, etc.
At the end of the day is a balance between security health practices and benefit from your smartphone's capabilities.
OMG no security patch update....we are going to die!!!!!
Just came out
miko12312 said:
Just came out
Click to expand...
Click to collapse
Which version/ country is that?
Djuganight said:
Which version/ country is that?
Click to expand...
Click to collapse
G930u universal varent qualcomm all s7 with qualcomm can flash any firmware to any device doesnt matter the carrier thats one reson the bootloader locked the carrier stuff is bloatware
Hope update for exynos come soon. Last update wad on 06 March fruition Marshmallow to Nougat.
I agree Samsung should do it better and force for more but I think it's also very related to regional Samsung departmans. Samsung Turkey released April updates for S7 and S5 in Turkey. 2 years past and S5 is still taking updates regularly in every 2-3 months.
Djuganight said:
Which version/ country is that?
Click to expand...
Click to collapse
USA, g930u, I finally got the update too. Months after all carriers released nougat, after the s6 began to receive nougat Samsung finally released for us.
Today i got the update for my G930F unbranded Germany Galaxy S7.
Security Patch is now april
Seem like that Germany and United Kingdom (BTU) are the ones updated more frequently.
I'm on Portugal unbranded (TPH) and the firmware is from 06 March and the security patch is from January
Just been chating with the online support of Samsung Portugal which confirmed that they don't have updates planned for the S7 in the near future... Indeed sad....
Djuganight said:
Seem like that Germany and United Kingdom (BTU) are the ones updated more frequently.
I'm on Portugal unbranded (TPH) and the firmware is from 06 March and the security patch is from January
Just been chating with the online support of Samsung Portugal which confirmed that they don't have updates planned for the S7 in the near future... Indeed sad....
Click to expand...
Click to collapse
Noone replied to you so I will do it
Samsung releases software updates regularly, almost monthly, but carriers and factors (if it's the correct word-i am from Greece) in countries can be still late to release their roms. I believe Samsung should apply stricter policies about this.
Until then, granted that someone you are not locked on a specific carrier software and you are familiar with the phone and the computer, you can flash a rom that ia updated regularly. The faster rom for S7 nowadays is PHN.
Sent from my SM-G930F using Tapatalk
Nikos Nx said:
Noone replied to you so I will do it
Samsung releases software updates regularly, almost monthly, but carriers and factors (if it's the correct word-i am from Greece) in countries can be still late to release their roms. I believe Samsung should apply stricter policies about this.
Until then, granted that someone you are not locked on a specific carrier software and you are familiar with the phone and the computer, you can flash a rom that ia updated regularly. The faster rom for S7 nowadays is PHN.
Sent from my SM-G930F using Tapatalk
Click to expand...
Click to collapse
Not really, Samsung are terrible at releasing updates, XEU is Unbranded meaning we don't wait for Carriers, we wait for Samsung, Last update was Octobers (Pushed out in November) and before that was August
Samsung are one of the worst OEMs for pushing out updates, always have been
Anyone know why Samsung takes so long to update the unlocked version? Is it due to compatability with all carriers and need to push carrier updates to get approved then they can push update to unlocked?
I'd imagine one reason is that they sell far fewer units for the unlocked versions.
I believe it is for security reasons. Easier to push out updates with errors that you can't exploit because of it being locked. Then having to make sure updates for the unlocked versions are more secure
I doubt it has anything to do with carrier compatibility, because I know that Samsung is not certifying the unlocked S8 for ATT. That is why the unlocked one cannot get VoLTE on ATT. There are very few unlocked devices that ATT certified for their network (HTC A9 comes to mind) and get on VoLTE. Verizon is not too far from this.
So, if we scratch carrier certification (because Samsung is not doing it), who knows what kind of contractual barrier with carriers is preventing them from updating the unlocked S8 and S8+. I guess similar contractual barrier that is preventing Sony selling their unlocked models with enabled fingerprint readers.
Got it. Well it finally received its first update this morning.
BlackKnight23 said:
Got it. Well it finally received its first update this morning.
Click to expand...
Click to collapse
I updated this couple days ago
paullu said:
I updated this couple days ago
Click to expand...
Click to collapse
Unlocked US S8? Ive been checking and this morning was available for me.
BlackKnight23 said:
Unlocked US S8? Ive been checking and this morning was available for me.
Click to expand...
Click to collapse
Unlock my s8 is like pine in my ass
Still waiting for T-Mobile to sim unlock.
T-Mobile customer service **** up! From may twenty something I started try call T-Mobile to unlock but still .........
paullu said:
Unlock my s8 is like pine in my ass
Still waiting for T-Mobile to sim unlock.
T-Mobile customer service **** up! From may twenty something I started try call T-Mobile to unlock but still .........
Click to expand...
Click to collapse
Ok that's the difference. You have a T-Mobile version that got a similar update except from what I had read it is May security patch. I actually have a factory unlocked S8 that isn't from any carrier. It got the update with June security patch
http://www.droid-life.com/2017/06/12/unlocked-verizon-galaxy-s8-updates/
Has anyone with an unlocked S8 (US) received the Oreo ota yet?
Ive always had Verizon branded Galaxy / Android phones in the past so I am not as familiar with the unlocked ota process. Do unlocked Galaxy phones typically receive ota updates last?
I have a Tmo device on U1(unlocked) firmware and haven't received the update yet. It's somewhat annoying that both Vzw and Tmo got oreo before the unlocked.
Sent from my SM-G950U1 using Tapatalk
Unlocked variants are usually the last ones to get the updates
:laugh: just got it..MetroPCS unlocked S8.
aftab565 said:
[emoji23] just got it..MetroPCS unlocked S8.
Click to expand...
Click to collapse
That is not the unlocked variant. If it is it has been flashed with SM-G950U firmware for MetroPCS. Your phone might be unlocked but the OP was asking about the SM-G950U1.
Sent from my SM-G950U1 using Tapatalk
adj998 said:
Unlocked variants are usually the last ones to get the updates
Click to expand...
Click to collapse
Why is unlocked variant last to get updates? No carrier bloat to update, so technically it should be first.
bocondo said:
Why is unlocked variant last to get updates? No carrier bloat to update, so technically it should be first.
Click to expand...
Click to collapse
Unfortunately that's just how it's is, hence why Verizon, T-Mobile and Sprint have the official Oreo update including the exynos variant. As for unlocked variants they'll eventually get it, but you'll probably get Oreo root faster than your official update. Or if you're impatient just grab an Oreo beta and work with that.
My Verizon s8+ that I use my tmobile sim got it yesterday. It changed the Verizon boot logo to tmobile. No more Verizon bloatware.
They said the U1 beta testers would be the first to get it too and that didn't happen.
Who ultimately pushes the ota for unlocked phones? Is it the manufacturer (Samsung) or the carrier that you're using the phone on?
If it is the carrier, then I suppose it makes sense that they would prioritize their locked variants first.
Waiting for Oreo OTA
Re: They said the U1 beta testers would be the first to get it too and that didn't happen.
Yes. It's taking a great deal of patience. Samsung seems to have appreciated our feedback as beta testers and then led us out to pasture and left is behind. I think I'm running a Jan 16 beta build and have been waiting...
What software version are you guys on? I am still on nougat 7.0. Are they going to push out 8.0 and skipping 7.1?
Androidsssssss said:
What software version are you guys on? I am still on nougat 7.0. Are they going to push out 8.0 and skipping 7.1?
Click to expand...
Click to collapse
Here in the states, my SM-G950U updated to Oreo v8.0.0 from v7.0 yesterday afternoon (March 20). Samsung Experience v9.0, Build number is R16NW.G950USQU2CRB9.
Security patch level is 1 Feb, 2018.
bocondo said:
Why is unlocked variant last to get updates? No carrier bloat to update, so technically it should be first.
Click to expand...
Click to collapse
I was told that the unlocked variant needs all US carriers to sign off on it before they can send it out.
I'm running beta Oreo for U1. Still no update. I wouldn't mind so much if the lockscreen didn't interfere with listening to music, the music gets slow, choppy, distorted sounds when the lock screen turns off my display. Can't listen to music in my car, it's so annoying. Wish they'd expedite the update like now. They basically jacked my radio with that bug. lol
caseyatbt said:
I was told that the unlocked variant needs all US carriers to sign off on it before they can send it out.
Click to expand...
Click to collapse
no that's bull****. that defeats the entire purpose of getting an unlocked phone.
The unbranded and unlocked version must work with both GSM and CDMA networks. They also must work with the carriers features like, WiFi calling, call waiting, etc. If I understand this correctly, they will require some form of carriers' certifications. Therefore unlocked phones will face delays from both Samsung and the carriers. I made a mistake of not believing former owners and publications about slow updates when I bought my S8 from Samsung. I have since corrected my mistake and bought a Pixel 2. You'll have to adjust to a plain Jane Android but you must give up something to get the timely OS updates from Google.
I am now fully convinced that Samsung will never change and Samsung phone owners who are dissatisfied with the unlocked OS updates can buy phones other than Samsung. Sony seems to be serious with the US market with their new Xperia XZ2.Sony's OS is as close to plain Android and their updates are not bad. My 2-yr old Xperia X has been on Oreo 8.0 for awhile now. Essential can be a player too.
Do yourself a favor. Stay away from Samsung if your priority is timely OS update.
If they let Snapdragon Users unlock bootloaders this was not a problem. May they will let us do that or some one will find an exploit i mean, yo can unlock bootloader on china snapdragon s8. #IWillBuyMyGalaxyS10WithExynos
gingson said:
The unbranded and unlocked version must work with both GSM and CDMA networks. They also must work with the carriers features like, WiFi calling, call waiting, etc.
Click to expand...
Click to collapse
Well I hope this is true for Oreo, but I doubt. The 7.0 the unbranded fw for at&t doesn't even allow VoLTE or WiFi calling out of the box.
Not sure about ATT but Oreo works on those features from T-Mobile. By the way I failed to mention that I am on Oreo Beta in my unlocked S8 which I used with Tmo.
Hi!
Just won a Canadian Galaxy Tab A (2017) SM-T380 at my job's Holiday party. I'm a bit displeased to see that it comes preloaded with 7.1.1 Nougat, a bit more displeased to see that no Canadian upgrade to Oreo exist, and much more displeased that the latest patch updates are dated January 1st, 2018 -- practically a year ago. Having no update/upgrade available from OTA, I went to SamMobile to see if a newer ROM was available, and found that some region did receive an upgrade to Oreo 8.1, with the Singapore and Korean variants having received security patch up to November 1st, 2018 and most European countries up to September 1st, 2018. Not so much love for North America...
Though I'm pretty sure I can flash another region's ROM on my Canadian tablet, as in the end they all share the same SM-T380 base, I'm wondering what are the differences between countries builds? I mean:
- Are the differences only limited to different base settings?
- Or are some capacities enabled in some countries, but disabled in some others (i.e. languages, keyboards not included, etc.)?
- Or (worse) does various countries ROMs include additional bloatwares bundled softwares?
- And could a specific country variant include, say, some mechanism to collect user data while another one would not have it?
What are the differences between a Canadian ROM and a Singapore ROM?
Oooooookay, litterally a day after I post my question above, I go back to SamMobile, and there's an Oreo 8.1 upgrade for the Canadian region variant. Pretty nice!
Still, my question would stay, I'm intrigued about the variations between regions.
XAC 8.1
Alexandre-P said:
Oooooookay, litterally a day after I post my question above, I go back to SamMobile, and there's an Oreo 8.1 upgrade for the Canadian region variant. Pretty nice!
Still, my question would stay, I'm intrigued about the variations between regions.
Click to expand...
Click to collapse
Here is the link:
https://updato.com/firmware-archive-select-model?record=D59A337EFB6811E89F15FA163EE8F90B
Us Canadians ALWAYS are last to receive updates, it seems like.... Probably because our government makes sure to keep us censored and oblivious to what the hell is really going on with the rest of the world.
Sassiest said:
Us Canadians ALWAYS are last to receive updates, it seems like.... Probably because our government makes sure to keep us censored and oblivious to what the hell is really going on with the rest of the world.
Click to expand...
Click to collapse
LOL quite like the description. Though I believe it's Samsung's policy, don't know why -- because I also have a OnePlus phone, and Canada is one of it's test market when updates are released. Samsung devices are obviously more common than OnePlus', though.
Still, I'm still wondering what is present or absent from a Singapore ROM that is not part of the Canadian ROM...
My phone is due for delivery at some point today and i was hoping to flash the UK BTU firmware to it straight away so I get futute updates quicker but noticed people saying they can't change CSC but that seems to be from people in the US. Anyone know if this will work with our Exynos phones?