Image Source: Zach Epstein, BGR Here’s another reason why Android has constant issues with security: OEMs add their own code to devices that might have big holes of its own. With more than 1.4 billion Android devices in use, a security team can probably find ways to exploit any custom code OEMs add to Google’s final Android releases. In fact, Google’s own Project Zero team took the Galaxy S6 Edge’s custom software for a spin and found several significant flaws in its code. As explained in a lengthy post on its Project Zero blog , the security team ran an internal contest for a week, with two teams of researchers tasked to find bugs in Samsung’s code that could be used by attackers for malicious purposes. “Each team worked on three challenges, which we feel are representative of the security boundaries of Android that are typically attacked,” Google wrote. “They could also be considered components of an exploit chain that escalates ...
