Insignia Refuses to Provide Security Updates for Tablet Owners - What to Do? - Security Discussion

Hello all,
I own an Insignia Flex 8 tablet (Model: NS-P08A7100) that was purchased in September of 2016. Insignia has never issued a security patch for this unit. When I contacted their support, they simply said there were no security updates available. So, my current security patch level sits at May, 2016. Should I be concerned about Insignia's refusal to offer security patching support after the sale? If so, can anyone offer any recommendations on how to proceed from here?
Thank you, gus

With Android you need to understand the huge disparity that exist between updates to the devices. The chance your device will get updated if it's a cheap one it's slim to none. Even Samsung tablets which cost a hell of a lot more get abandoned in updates fairly early. The good thing with Android is that if it has enough user support you can customize the tablet to your liking and install another ROM. But I doubt the Insignia tablet will ever get updated, though it shouldn't pose any trouble as long as you don't install sketchy stuff.

Related

What is Alcatel's Android Update History?

I just pre-ordered the phone and I'm curious what the long term support is going to be like. I did some googling and didn't really find any solid evidence that they will support the phone after release.
Has anyone owned their products in the past and received major Android upgrades?
They are not up to par with Motorola or anything, but I googled and was able to find an old link explaining how to upgrade to ICS for a prior phone:
http://www.alcatelonetouch.com/global-en/support/faq/ot-995ics-fota.html
Hopefully since this is their flagship phone, there are some developers that will work on bringing updates to the phone
Edit:
Also found confirmation of updates from the SVP of US branch an hour or two ago: http://androidandme.com/2015/05/new...l-3-launch-updates-and-giveaway-announcement/
We’re committed to ensuring that we always have the very best user experience possible and plan to have Idol 3 software updates available to consumers via over-the-air updates. Timing on these updates will be on a rolling basis as needed.
Click to expand...
Click to collapse
Do you know if, usually, with Alcatel on xda, we may have, at least, a rooted device + a custom recovery to make backups...?
That's what I'd like to know before I purchase one.

Motorola confirms that it will not commit to monthly security patches

Motorola confirms that it will not commit to monthly security patches
Motorola says it is "more efficient" to bundle security updates into fewer releases.
RON AMADEO - 7/26/2016, 2:24 PM
Motorola has clarified the update situation of the Moto Z and Moto G4, calling Android's monthly security updates "difficult" and deciding not to commit to them.
...
For the future of security updates at the Lenovo-owned Motorola, we look to the 2015 Moto X, which has been receiving Android security updates about once a quarter instead of monthly. The Moto X spent the last few months on the "February" Android security patch and only this month was updated to "May."
...
Click to expand...
Click to collapse
The MXPE has been a great device, but this issue is why I won't get another Moto phone. I got this device, expecting timely updates, shortly after Nexus devices. But we've seen far from that. So next phone, will be a Nexus for sure, for me.
My Moto 360 2nd Gen also gets updates slow. My LG G Watch R is current, and got a July Android Wear update last night. While my Moto 360 2nd Gen is stuck in May.
Moto feels it's more "efficient" for me to be vulnerable for some months. I don't find that to be acceptable.
ok peace ill stick with my pure .
Darnell_Chat_TN said:
Motorola confirms that it will not commit to monthly security patches
The MXPE has been a great device, but this issue is why I won't get another Moto phone. I got this device, expecting timely updates, shortly after Nexus devices. But we've seen far from that. So next phone, will be a Nexus for sure, for me.
My Moto 360 2nd Gen also gets updates slow. My LG G Watch R is current, and got a July Android Wear update last night. While my Moto 360 2nd Gen is stuck in May.
Moto feels it's more "efficient" for me to be vulnerable for some months. I don't find that to be acceptable.
Click to expand...
Click to collapse
Yeah that is kind of bull**** to be honest. I agree, the speed of the Nexus update is fantastic and certainly a huge draw towards those products. Motorola has more or less been a let down with this product in a lot of areas.
dewoine said:
ok peace ill stick with my pure .
Click to expand...
Click to collapse
That is some fantastic input you have there.
dewoine said:
ok peace ill stick with my pure .
Click to expand...
Click to collapse
I agree with him because I do like my phone. Yes, would be nice to have updates but every phone has had this issue and Moto/Lenovo is no different.
I been using phone since the HTC hero so I been around the custom rom for a very long time and because of them every phone has performed better than stock. Now, pure stock is nice but I wanted to try a custom rom and the one I am currently using rocks.
Security updates make me laugh. Buying an other phone for that even more. My Clark is a great phone and I don't really mind being few months behind with security updates. Can someone tell me, how many of you had any problems because late security updates? No BS, please.
Sent from my XT1572 using Tapatalk
So they just didn't commit to the monthly plan but rather on a quarterly basis. Sounds like they will still work on updates on a somewhat regular basis. It does make sense. They have migrated to the near vanilla experience which means a necessity for fewer programmers. This means the performance to dollar value will remain since it ultimately costs less to produce and maintain the product lines. Win in my opinion.
Edvin73 said:
Security updates make me laugh. Buying an other phone for that even more. My Clark is a great phone and I don't really mind being few months behind with security updates. Can someone tell me, how many of you had any problems because late security updates? No BS, please.
Sent from my XT1572 using Tapatalk
Click to expand...
Click to collapse
For me, the idea is to avoid ever having a problem, because of a late security update. Not waiting to be burned and then looking to stay current.
To each their own. I don't mock anyone's opinion.
Darnell_Chat_TN said:
For me, the idea is to avoid ever having a problem, because of a late security update. Not waiting to be burned and then looking to stay current.
To each their own. I don't mock anyone's opinion.
Click to expand...
Click to collapse
If you feel these updates are critical to you, I highly recommend Nexus phones as they will almost always be the first to get any updates. Updates were not a big factor into buying this phone but rather the cost to spec value. I do think Lenovo could do better with updates but I have the phone so I will do my best to enjoy it. Nexus line will probably be my next phone since they are starting to get better with having more up to date specs.
TBH... These Android security updates that are JUST security updates, probably are not important or relevant to 99.99999% of users. I read a blog article recently by an Android "security specialist" (take it with a grain of salt), that your chances of being affected by most of these security flaws that the security patches fix in Android is about the same likelyhood as being struck by by lightning... while being bitten by a shark. Probably an exaggeration, but even so, the point was effectively made. The security patches are more about PR than technical need.
acejavelin said:
TBH... These Android security updates that are JUST security updates, probably are not important or relevant to 99.99999% of users. I read a blog article recently by an Android "security specialist" (take it with a grain of salt), that your chances of being affected by most of these security flaws that the security patches fix in Android is about the same likelyhood as being struck by by lightning... while being bitten by a shark. Probably an exaggeration, but even so, the point was effectively made. The security patches are more about PR than technical need.
Click to expand...
Click to collapse
I think you are correct for the most part. Problems like the stagefright issue led to this. However, with android being the dominant smartphone ecosystem, the number of individuals targeting for exploits will be higher as the market continues to grow. Being Linux based helps but when talking about the masses, you have some really ignorant users out there. I say ignorant because some don't really think about being "smart" when it involves safe habits such as downloading from reputable sources and not browsing to those "specialty" sites.
Edvin73 said:
Security updates make me laugh. Buying an other phone for that even more. My Clark is a great phone and I don't really mind being few months behind with security updates. Can someone tell me, how many of you had any problems because late security updates? No BS, please.
Sent from my XT1572 using Tapatalk
Click to expand...
Click to collapse
aybarrap1 said:
If you feel these updates are critical to you, I highly recommend Nexus phones as they will almost always be the first to get any updates. Updates were not a big factor into buying this phone but rather the cost to spec value. I do think Lenovo could do better with updates but I have the phone so I will do my best to enjoy it. Nexus line will probably be my next phone since they are starting to get better with having more up to date specs.
Click to expand...
Click to collapse
You and I are basically thinking alike. Our "next" phone will be a Nexus. That's what I said in the OP. I never said I'm trashing my MXP today, no way. I really like it. I dropped it and have to send it to MotoCare for repair, but can't wait to get it back. I'm just saying, my "next" phone will be a Nexus. And I did expect more timely updates, from a device running a more vanilla brand of Android. Before the MXP, I had an HTC One M7 Google Edition, it would get very timely updates. So it has been something I became accustomed to and expected with a "Pure Edition" device. I really miss the Google Edition line.
aybarrap1 said:
I think you are correct for the most part. Problems like the stagefright issue led to this. However, with android being the dominant smartphone ecosystem, the number of individuals targeting for exploits will be higher as the market continues to grow. Being Linux based helps but when talking about the masses, you have some really ignorant users out there. I say ignorant because some don't really think about being "smart" when it involves safe habits such as downloading from reputable sources and not browsing to those "specialty" sites.
Click to expand...
Click to collapse
Was there ever a documented case where the stagefright vulnerability was ever exploited in the real world and not in a lab? I don't recall of any...
Sent from my Motorola XT1575 using XDA Labs
acejavelin said:
Was there ever a documented case where the stagefright vulnerability was ever exploited in the real world and not in a lab? I don't recall of any...
Click to expand...
Click to collapse
Never said there was a documented case. However the media created a frenzy around it which helped prompt the monthly security updates to help alleviate negative pr. Some people are not careful so doing the monthly updates may potentially help prevent any actual exploits from happening. Currently, in real life and real case scenarios, the great majority of negative security impacts on android users are due to stolen phones which do not have lock protection and remote wipe features activated and in place
I'd have to say the same. I'm expecting Moto will get around to the N update before abandoning the phone. But in another year I'll be seriously considering other brands. If Google ever rethinks their opinion on expandable memory, it would probably be a no-brainier for me.
Silarn said:
I'd have to say the same. I'm expecting Moto will get around to the N update before abandoning the phone. But in another year I'll be seriously considering other brands. If Google ever rethinks their opinion on expandable memory, it would probably be a no-brainier for me.
Click to expand...
Click to collapse
That has been my biggest set back.
Honestly, it's very easy for Google do to monthly security updates, and it's good that they're being proactive about them after being dragged through the mud by Apple bandwagon sites and general media (along with those dubious "security research" firms) after Stagefright. They have nearly unlimited resources and get an astounding amount of advertising revenue from Android itself. But, it also helps that they created and maintain Android itself.
I do think they hurt smaller manufacturers by putting this expectation of monthly security updates in people's heads. Android manufacturers, with the exception of Samsung, usually are not flush with cash. Just recently, LG's mobile division lost over $100 million in 1 quarter alone. Unless you have a loyal fan base that looks forward to new devices year after year, like Apple and (again) Samsung, it's a difficult position to be in. I do think it's furthering Google's own agenda, however. They are very slowly herding people into the Nexus program and into the pure, ideal Google Android ecosystem. There's already a gulf in feature sets between pure AOSP and Google's AOSP-based Nexus apps; pure AOSP is looking extremely barebones these days as Google has basically abandoned the basic apps in Android (like the dialer/Phone app, for example - it got a visual overhaul, but no new features except on Nexus devices). I only have the Google dialer features on my MXPE because Google accidentally released a working version for non-Nexus devices. It's certainly not great for AOSP-based phones like the MXPE.
Eventually, though I think Google will keep Android open for the foreseeable future, I do believe they're working on a new Google-only mobile OS where they control both hardware and software elements (chip design to custom tailored, proprietary kernels and hardware drivers). I think Android served its purpose for Google: to become a dominant OS, a viable source of advertising revenue for the company, and a viable ecosystem and market for digital goods (Play Store). Those Google services and Play Store ecosystem can be implemented into any OS they create, just as it was recently made available to ChromeOS devices.
Anyway, at the end of the day, you have to ask yourself if any of the Android devices in your recent past were terrible or completely insecure. Because, I've seen people change opinions on good devices based solely on security updates, even though the devices in our pretty recent past didn't receive them. So, if you're afraid Android is insecure even though you've never experienced an attack, even with those older, "less secure" devices or now on a newer device without monthly security updates, why continue to use Android? Apple is still continuing its strategy of implementing security updates in OS updates, by the way. Those are not monthly.
Malware is still required to exploit many of these vulnerabilities, and I'd say the great majority do need root privileges to be most effective, which is why those elevation of privilege vulnerabilities need to be patched. Will security updates protect you from sketchy online behavior or being gullible (phishing emails, popups claiming you have a virus, etc)? Nope.
I'm fine with quarterly updates - 4 quarters, 4 "rollup" updates.
My reason for considering the Nexus is not because of security updates. I want it because it is vanilla android. I am pleased with the MXPE because it is pretty much the vanilla experience, buy with some extra features from Motorola that I actually find useful. There are only a couple of their implementations I don't use. I found LG want to bad with their stuff. To Mr Samsung is the worst for "features" as there are numerous ones, and they overload the phone with their apps, many of which do pretty much the same thing Google already does well. For my next phone Nexus is still a possibility, buy so is Motorola at the moment. Only time will tell.
Jason.DROID said:
... So, if you're afraid Android is insecure even though you've never experienced an attack, even with those older, "less secure" devices or now on a newer device without monthly security updates, why continue to use Android? Apple is still continuing its strategy of implementing security updates in OS updates, by the way. Those are not monthly.
....
Click to expand...
Click to collapse
If security is the major concern, the better option is to go Nexus and get the monthly updates. That along with other best practices. And with those updates, may also come bug fixes. So more timely updates there. Then there are pluses such as the Google Fi option. And yes, some Google apps are only kept current for Nexus devices.

US SHT-W09 (C567) - E-Mail from Huawei Support (Updated July 13th)

I decided to contact Huawei Support to find out what's happening with the MediaPad M5 [US Version - SHT W09 (C567)] upgrade to EMUI 9.0, since it's been perpetually stuck on 8.0.0.196 for many months with seemingly no official way to upgrade. I will say that they do have a very good support team that was quite helpful. Below is the e-mail response that I received.
"This email is to follow-up your inquiry about an update for the MediaPad M5. We would like to draw to your attention that currently, we do not have any information about this update coming to your device. However, please do not be disheartened, we recommend you to stay tuned to our social networks as we will continue publishing relevant information about further updates in there."
Well, many of us users of the SHT W09 (C567)] feel really completely left out by Huawei. I truly hope that I'll see an upgrade to at least EMUI 9.0 for my MediaPad M5, however I may never buy another Huawei device in the future even though they make fantastic devices.
Edited:
I got a further bit of information by contacting Huawei via The Twitters:
"Based on the information you kindly provided us, we could verify that your MediaPad M5 is up to date with the last upgrade available. You can be sure that we are working to provide with the best user experience to our customers. That's why we invite you to stay tuned to our official sites, where you can find more news regarding the next updates for your device model."
Based on that response I'm trying to prepare mentally for not getting an update.
Edited:
I was quite surprised this morning to see an update notification. All it did was bring the M5 up to July's patch level. Still EMUI 8 with 8.0.0.198 so a minor jump. Still not sure why we can't have at minimum EMUI 9.
I have the same issue with my CMR-AL09, stuck also on 8.0.0.196 (C432) ,
never again huawei ,
The odd thing is there are some users who have gotten 9.0. my only guess is the US ban stopped the rollout hopefully now that it's lifted the rollout will ramp back up.
MoRican said:
The odd thing is there are some users who have gotten 9.0. my only guess is the US ban stopped the rollout hopefully now that it's lifted the rollout will ramp back up.
Click to expand...
Click to collapse
The ban hasn't officially been lifted. Either way, Google had a 3 month licence to continue trading with Huawei until end of August iirc.
I have the CMR-W09 (C567) version and I have not got Pie yet. But I am not really that upset. Yes I would like to have Pie, but I can live without it. I bought this tablet knowing that it would upgrade to Pie at some point. If I get Pie or not it is still better than having a Samsung.
I'm in the market for a one-hand tablet (less than 5" width). Are Huawei tablets in the bad books with Google Android, in a wider USA-China context ? I am in Australia, so there is no official ban (yet) on Huawei products, but Huawei was prevented from bidding for a 5G network.
Mediapad M5 seems top, but I'm likely to settle for an M3 8.0 Lite, if it has reasonable chances of being supported by Google Android.
Huawei largely abandoned the US market when political bullying from Trump forced AT&T and Best Buy to drop plans to sell the Mate 10. That phone ended up being dumped at places like Sears, K-Mart and Walmart at steep discounts. The US model Mate 10 received none of the updates that were pushed to all of the non-US models.
Since the political climate has only gotten much worse since the Mate 10 fiasco Huawei doesn't consider the United States a viable market so I wouldn't hold my breath waiting for updates.
If software updates are essential to you then you are probably better off getting one of the new Samsung tablets running Android Pie.
Thanks, I'm less concerned about Android updates. But I don't want to end up with a device which has no access (or limited access) to Google Playstore. For example, I'd like to install Microsoft Office 365 which my employer gives us to read company emails. It works great on my Huawei Mate 9.
am-imate said:
I got a further bit of information by contacting Huawei via The Twitters:
"Based on the information you kindly provided us, we could verify that your MediaPad M5 is up to date with the last upgrade available. You can be sure that we are working to provide with the best user experience to our customers. That's why we invite you to stay tuned to our official sites, where you can find more news regarding the next updates for your device model."
Click to expand...
Click to collapse
Based on their response I'm trying to prepare mentally for not getting an update.
I know this is a sore point but I'm looking for a new 8" tablet and i want to upgrade from my Z3 compact that has been on Android 6 for a while. Assuming the US Wifi model never gets updated what do people think about their Mediapad devices? Are you still happy with it? It is still worth getting for a 'high' performing media consumption tablet?
HighTowerDV said:
I know this is a sore point but I'm looking for a new 8" tablet and i want to upgrade from my Z3 compact that has been on Android 6 for a while. Assuming the US Wifi model never gets updated what do people think about their Mediapad devices? Are you still happy with it? It is still worth getting for a 'high' performing media consumption tablet?
Click to expand...
Click to collapse
Overall it's a great tablet, no real complaints besides the lack of attention to updates on the US WiFi model.
My 10 just received 8.0.0.198 update in the US. That's a decent sign, my hope it's security update/OS prep for the move to 9.0 or 9.1.
MoRican said:
My 10 just received 8.0.0.198 update in the US. That's a decent sign, my hope it's security update/OS prep for the move to 9.0 or 9.1.
Click to expand...
Click to collapse
Are you able to download and install? Mine just says download failed
shuvabrata said:
Are you able to download and install? Mine just says download failed
Click to expand...
Click to collapse
I had no issues, it had already downloaded via wifi so all I had to do was hit install, it completed with no issues.
MoRican said:
My 10 just received 8.0.0.198 update in the US. That's a decent sign, my hope it's security update/OS prep for the move to 9.0 or 9.1.
Click to expand...
Click to collapse
I got that update today as well but that only adds up to two updates I have received since this tablet was launched. After Huawei abandoned the US Mate 10P it only received some security patch updates which Huawei support told me actually came from Google. It never received any OS bug fixes or feature updates from Huawei. According to the changelog there's nothing in this update other than the July security patch.
Preview:
Every day I look for information on sht-w09 567 update and see virtually nothing. I thought that someone would know something. Pretty frustrating that Android 10 beta testing is happening and Huawei gives zero information on 9 update for our tablet.
cburd said:
Preview:
Every day I look for information on sht-w09 567 update and see virtually nothing. I thought that someone would know something. Pretty frustrating that Android 10 beta testing is happening and Huawei gives zero information on 9 update for our tablet.
Click to expand...
Click to collapse
I am wondering what you are complaining about. There is a company forced to stop (almost) all of their business in the US. How can they (and why even should they) provide updates / introduce new devices? Probably it's the wrong people you are complaining about ...
Huawei has stated that the tablet would get Android 9 update. I think it's been done in every other region. Despite the government pissing contest, how hard would it be for Huawei to release the update for USA? That is my complaint.
@cburd business is halted in US. full stop. Providing a software update is doing business ... in addition something may go wrong during the update -> they need to provide services / a place where you can complain / ... what would you say if your device is updated but (for what ever reason) doesn't work any longer and there is no support you can contact / you can speak to?
AndDiSa said:
@cburd business is halted in US. full stop. Providing a software update is doing business ... in addition something may go wrong during the update -> they need to provide services / a place where you can complain / ... what would you say if your device is updated but (for what ever reason) doesn't work any longer and there is no support you can contact / you can speak to?
Click to expand...
Click to collapse
I thought they were given a 3 month reprieve or even an exception/waiver to consumer type devices?

Samsung quits support for the Galaxy S8

Well.. after all the drama Galaxy users had with their previous flagships regarding Software Updates, the Galaxy S8 is the next one to be silently ended by Samsung. They removed the S8/S8+ from their Security Update site, which means that the April 2021 patch was the last one we will ever see from Samsung's site on the S8. Maybe they will roll out an additional one, as they did last year with the Galaxy S7 (EOL: August 2020 patch), but thats not guaranteed..
Sad news but I already saw that coming last year, so I already switched to an iPhone.
Sad story.
How secure is using an unpatched phone with a good antimalware / antivirus ?
Alternatives?
Are there custom ROMs receiving security updates that can be used
with play store etc... without having root enabled?
I'm wondering this myself.
Is it time to buy a new phone and retire this?
My display is already cracked in two corners with small bits gone.
I'm not happy that there are no more security updates.
I have the same questions! I'd like to install a custom rom but the links all seem to be down.

Hotwav cyber 7 security updates

Hello everyone, this is my first post on this forum.
I was gifted with a hotwav cyber 7 rugged smartphone which I quite like. The only problem Is that when I try to update It, it says that the last available android security update was on 5 October 2021.. is it normal? Is safe to use a device like that? I forgot to say that it has android 11.
Security patches are frequent for phones, and there are easy ways to keep up to date on your phone in particular. But: It's on OEM whether they provide updates published by Google or not. Google can't force anyone to deliver them to you. So you'll need to wait for them to send an update.
BTW:
That's the reason why I use Google Pixel phones. Thus latest update I got is security upate released 2023-06-05.
Yes I'd use a different phone too, but this one was a gift. So with that said, is it safe to use a device like that as my main smartphone? Are the security patches that important or the usage of an AntiVirus can make up for the shortage of updates?
IMO antivirus programs aren't beneficial on a smartphone, are senseless crap, only the Android security patches MUST NOT BE IGNORED BUT IMMEDIATELY GET INSTALLED.
FYI: Samsung closes a total of 64 security vulnerabilities in Galaxy devices with the June update.
Got it.. so do you suggest me to get rid of a smartphone with android 11 that had its last update in October '21 and will probably never have further updates?

Categories

Resources