<story><title>Uncovering Android Master Key That Makes 99% of Devices Vulnerable</title><url>http://bluebox.com/corporate-blog/bluebox-uncovers-android-master-key</url></story><parent_chain><item><author>mdaniel</author><text>Is it my imagination or is 5 months a very short disclosure window for a vulnerability that affects Androids since Donut?&lt;p&gt;I think about how manufacturers drag their feet on normal updates and can&amp;#x27;t imagine what heaven and earth movement would be required to patch this industry wide.&lt;p&gt;Then again, maybe the attack surface for this is small enough that it&amp;#x27;s manageable.</text></item></parent_chain><comment><author>adamely</author><text>Google set the time frame and gave the go ahead for public disclosure based on their work with the manufactures.</text></comment>
<story><title>Uncovering Android Master Key That Makes 99% of Devices Vulnerable</title><url>http://bluebox.com/corporate-blog/bluebox-uncovers-android-master-key</url></story><parent_chain><item><author>mdaniel</author><text>Is it my imagination or is 5 months a very short disclosure window for a vulnerability that affects Androids since Donut?&lt;p&gt;I think about how manufacturers drag their feet on normal updates and can&amp;#x27;t imagine what heaven and earth movement would be required to patch this industry wide.&lt;p&gt;Then again, maybe the attack surface for this is small enough that it&amp;#x27;s manageable.</text></item></parent_chain><comment><author>greenlakejake</author><text>Not really. Three months is common.</text></comment>