[Security Discussion] CHEF-KOCH:
Google does not include spyware, trojans and such things in there products. If they do this would ruin the trust in such kind of products.

There are other problems:

- some external tools including 'home call' functions to improve there products like cm for sending bug reports or google for there external apps to collect device info

- certificates can be easily manipulate, because there is still nothing to show or check if they are really okay

- external sources are always risky

- there is no av or something integrated, only a apk uploader service to check against known apps (this service runs in background even if you disabled it)

- the lack of security interest

- to integrate encryption does not help if you don't know what you are doing or if it still can be compromised by known hacks like cold boot attack and such

- google does not want a fully secure os because that would also break in-app, ads and such things - one the one hand it's okay but on the other hand not

- drive by or a scanner to scan the firmware is difficult or not 'possible' because some security mechanism like selinux and priviles under a running os

- java is generally bad (well matter of taste but I prefer for several reasons c++)

- there is still no firewall and such tools as mentioned integrated

- Lack of uldates - how about instead modding or creating billion roms why not create one os for all which can be customized or get the ability to incremental update apps and security related things ....

- yes nsa or selinux was build by them, not means it's risky, tor is also nothing without the money and servers from the nsa - but we should take control ... Not them!

- not all is bad but more people should open there mind and start to ask things to better understand how hacking works, because if you know, you also know how to protect against it

- i realized there is nothing secure but faster updates would make it harder to crack or some hackers would easiler give up ... Example: since java get more updates I read about that there are less known hacks

- instead of talking and making 1 billion threads about the da*n gui, why not talk more about security on the xda first page and such ... It's easier to customize the rom but very difficult to hardening the os ... So better talk about this ...

- there must be a no spy law, if not it will never get an end and people should not belive all the surveillance lies ... It does not help against terrorism and never will be or do you know what's going on in my head? If I like to bomb something I simply not use the internet to talk about that and meat the persons to talk face to face ..

- Knowlage means power and control ... We should take control not one or two institutes we pay for to get all the spying things

- most things should be free, leak all things snowden not only one by one ....

- the whistleblowers need more protection

- again not all is evil but you should ask yourself how they get there money

- to open source does not help to prevent such bad storys ... See cryptochat and other examples like ssl so don't cry about the source if you never able to understand it or you never fix anything

- I'm sick of all the gui talk .... Really .... Again we should talk more what's behind .... I can't say this often enough

- Android should get be more options to enable/disable important future to get the full control over everything