Samsung Screwed Up Encryption on 100M Phones

Gee, why do companies insist on keeping source for such critical systems SECRET to such an extreme? They're not even inventing anything new; they're using standard techniques, and using them wrong.

So the data in 100M phones was essential stored in plaintext? Amazing!

Avoiding nonce reuse is like crypto 101. How come a company such as Samsung could get it wrong?

Is there an actual list of affected devices anywhere? Or, because this is software, is it effectively every Samsung Galaxy phone within a date range?

Give users root. There's a decent chance they can do things better than the manufacturer.