Daniël

@ferrebam @alkatraz_200 @GrapheneOS The last Android security bulletin almost 100 high/critical vulnerabilities in the main Android system components and over 80 in vendor-specific components (counted them approximately).

Waiting for weeks or months to fix them is terribly irresponsible (which unfortunately applies to most Android OEMs).

These are not theoretical issues, last week there was a chain of a WeChat + Android vulns that gave 0-click remote root access:

https://calif.io/research/weworm

@ferrebam @alkatraz_200 @GrapheneOS The companies that make 50-200 Euro phones are never going to make reliable monthly firmware, driver, and other security updates. It's nearly impossible at those margins.

Even companies with a huge sales volume, like Samsung, only offer quarterly updates on their budget models (A07, A17, A37, etc.).

Claiming that such phones are secure (even with GrapheneOS) would be a lie.

@engideer @GrapheneOS @ludonaut This is all besides the point that LLMs can find many vulnerabilities that fuzzers and traditional static analysis tools cannot (easily) find.

@engideer @GrapheneOS @ludonaut Inference will only get cheaper energy-wise as more and more specialized inference hardware is being made.

At any rate, there are many studies about this, e.g.: https://www.sciencedirect.com/science/article/pii/S2542435126001145