<http://schema.org/articleBody>
"In a world where malware targeting Android phones is used more and more everyday, security updates are fundamental to keep users away from malware and hackers. That's why the American Civil Liberties Union has filed a complaint on Tuesday, accusing mobile carriers of failing to distribute updates and fixes to their Android phones. \nIn its 16-page complaint filed with the Federal Trade Commission, the civil rights group pointed its finger at AT&amp;T, Verizon, Sprint and T-Mobile, accusing the companies of leaving users vulnerable by providing them with phones running unpatched and outdated versions of the Android operating system, which \"rarely receive software security updates.\" \n\"The problem isn\u2019t that consumers aren\u2019t installing updates, but rather, that updates simply aren\u2019t available,\" wrote Chris Soghoian, the ACLU principal technologist and senior policy analyst, in a blog post. \"Although Google\u2019s engineers regularly fix software flaws in the Android operating system, these fixes aren\u2019t packaged up and pushed to consumers by the wireless carriers and their handset manufacturer partners.\" \nAnd that's because the majority of Android phones on the market don't run Google's native Android version but a carrier's customized version. The ACLU notes that these are effectively unique operating systems that need their own updates, and only the companies that modified the original Android source code can issue those updates. And most of the time, they either never do that or do it months later.\nSEE ALSO: 100K Android Apps in Google Play Are 'Suspicious' [INFOGRAPHIC]\n\nMoreover, according to the complaint, the carriers don't even warn the users about these flaws and vulnerabilities. And these failures, according to the ACLU, amount to \"deceptive and unfair business practices.\" \nIf the carriers can't or are unwilling to issue security updates more frequently, the ACLU is asking the FTC to compel carriers to give their users a way to terminate their contracts early \u2014 without having to pay the usual termination fee \u2014 or allow them to exchange their insecure phones for newer ones, or to give them a full refund. \nIn February, the FTC ordered HTC America to patch security vulnerabilities in their phones. But in a tweet, Soghoian notes that with this complaint \"we don't ask the FTC to force the carriers to issue updates, merely to tell consumers about flaws.\"\nFor Soghoian, putting pressure on the carriers to improve their security practices should be part of the government's commitment to improve the country's cybersecurity. \"Cybersecurity threats are real, and improving security and privacy should be an important priority for the government,\" he wrote. \"We think there are plenty of things the government can do to protect the computers and networks that consumers, businesses and government agencies depend upon without violating civil liberties. Investigating the wireless carriers and their role in smartphone security updates would be a great first step.\"\nACLU - Android Ftc Complaint\n\nImage courtesy of Flickr, Family O'Ab\u00C3\u00A9"^^<http://www.w3.org/2001/XMLSchema#string>
<http://mashable.com/2013/04/18/aclu-ftc-android-security/>