Comment Re:Android updates suck (Score 1) 136
Maybe. I believe the media exploit from a year or two ago on Android was patched on phones assumed abandoned by OEMs.
Sadly, for many customers they rely on the goodwill of their OEM and telco to provide serious patches. I expect shops like Samsung, Lenovo/Moto, LG, Sony, and HTC to patch pretty much any phone sold in the past 3 years or so.
Budget buyers, no-name brands, etc are most likely going to be hacked constantly until they replace the phone. KRACK is bad but WPA-AES means they can't inject data and that's on top of TLS blocking that as well. Blueborn, on the other hand, is much more serious and could provide root remotely.