Hacker News Reader

The headline is misleading. These vulnerabilities are not in Android 10 but are fixed by Android 10. Which of course means they exist in versions prior to Android 10. Google provides security updates for prior versions so what is not clear from the article is whether these are only fixed by upgrading to Android 10 or whether they were identified during the Android 10 development process but fixes will also be available for prior versions.

View on HN

> These vulnerabilities are not in Android 10 but are fixed by Android 10. Which of course means they exist in versions prior to Android 10.

That's not accurate. Android 10 is still in beta, so many of these vulnerabilities (just like many other bugs you'll see in a beta) are likely new to Android 10, and will be fixed before the final release.

my take on the headline is that Q fixes vulnerabilities that exist in pre-Q versions. this means that those vulnerabilities are still in effect for the vast majority of current users, and will be for some time since it will take years before Q is actually being run by the majority of android devices. the vulnerabilities are very much alive.

Reply on news.ycombinator.com