Has anybody received the latest security update yet?

Normally you can flash your firmware to an original state. Not with incremental updates. What if firmware becomes corrupted. Tough luck? I don’t think so.

OK, so I’ve discovered what happened with my lack of updates.
My problem was that I hadn’t received any update since I’d got the phone at the end of october. The security patch was September 5th.
I got a very weird answer from support saying that, as my mobile operator was Orange (France), I had to get in touch with them for the updates, even though I bought my FP3 directly from Fairphone and not through Orange. I answered saying I strongly disagreed with that, but it gave me an idea : I switched my mobile data to my work SIM which is an other operator (SFR), and I immediately had updates available, 3 to be precise : one for September, one for October and one for December. I was in fact 3 updates late.
My conclusion is that the partnership between Orange and Fairphone had led to a technical misinterpretation in considering that all FP3s with an Orange SIM were purchased through Orange and also had to receive updates through them. The problem is that FP3s like mine which were purchased directly on the FP3 website are not configured for the Orange updates and are probably refused access to the “normal” FP3 updates, or something like it.
So I would advise anybody who hasn’t received the October update to try with another SIM (or perhaps no SIM at all?).

11 Likes

Interesting. Did you communicate this theory back to support?

1 Like

Yes, but no reply yet…
I also told them that in any case I didn’t want Orange’s updates because I’m not interested in their bloatware.

4 Likes

Really makes me wonder what happens with no SIM in the phone :slight_smile: My updates are up to date, so I can’t tell right now, have to wait for the next one.

1 Like

A partnership that cripples the phones ability to receive regular updates? This whole branding sh*t should belong to the past. Apple has proven for 12 yrs now that the OEM does not have to accept operator bloatware on its devices. Unfortunately, not every manufacturer is in such a privileged situation that every carrier wants to sell its phones …

actually, - based on how I understand the code of the AOSP Settings software:


( look for CARRIER_CONFIG_SERVICE ) Android includes an ability of the carrier of the cellphone network it is connected to to override the phone manufacturers update path (which uses google’s checkin-service through the google play services to search for updates)

this means, - short of dumping google altogether and hosting their own OTA infrastructure, Fairphone has no way to prevent that. Any carrier can tell any phone to retrieve updates from an alternate URL as soon as you have their SIM in your android phone by pushing a GSM config packet over the network to your phone. normally that only sets APNs and server URLs for stuff like MMS services, but it can override your updates!

Apparently Orange has chosen to do so with Fairphone, however without actually providing updates.

That being said, to be installed, such an update would still have to be cryptographically signed by Fairphone to be installed, so the impact to do malicious shit is somewhat limited. It just results in you not getting updates if you have their SIM.

3 Likes

@Monica.Ciovica: Can Fairphone please confirm with Orange what the actual update situation is and, if Orange really override the setting, get this sorted out somehow with them?

6 Likes

Thanks!
Perhaps she could also see if the problem is likely to happen with other mobile operators.

At least none of the German carriers–Vodafone, Telekom, MD–is doing any comparable branding. AFAIK they’re all selling the FP3 “as is”.

the nasty thing is, this will happen even to an “as-is” stock Fairphone you bought through the webpage, if you put an Orange-France SIM card in it.

3 Likes

I know - I have linked the official Fairphone statement on this further up this thread.

Another funny thing happened tomeyesterday : I restarted my FP3 after doing some stuff with the micro sd card and it automatically started to download all the Orange apps, which I of course immediately uninstalled.
It really does look like Orange’s servers are configured to consider all FP3s as purchased through them and to try to push all their bloatware on them. I never had that with my FP2, even though they also sold it on their online shop. Maybe because I had Lineage since the first port…
Makes me kind of impatient for a Lineage port on FP3. I hate it when third parties go nosing around in my stuff!

3 Likes

Even if you have an Orange SIM, there is no reason why an FP3 should contact Orange’s servers unless it has been preprogrammed to do so. The Google Play Store does not change if you change operators.

It’s not the Google Play Store that installs the Orange apps:

When an Orange France SIM card is inserted into the device, the App Center automatically installs for the main user*
[…]
App Center will install the ‘Orange et Moi’ app on the device automatically. This is a feature of the app itself and Fairphone is not responsible for the behavior and content of Orange applications.

Source (posted by @teezeh above)

3 Likes

So it means that it’s the same with all Orange plans and it’s not related to the update issue if I understand correctly.
I didn’t have that problem with my FP2, but again, I was running Lineage when I switched to that mobile operator which probably prevented Orange from pushing apps on my smartphone.

Hi,
Got a reply from support saying they were glad I could update my phone after all and that they would forward the issue internally.
In my answer I did raise the fact that, as Orange has about 40% of the french mobile operating market, a very significant amount of the FP3s sold on their website to french customers were probably not updated…
And I wouldn’t count on the owners to feel concerned with the issue… When I talk to my colleagues/friends/family about security updates, Lineage, privacy…etc, most of look look at me as if I’m from another planet!

3 Likes

Hi,

I have the same issue. I bought my FP3 from Sosh ( Orange).

I am pretty sure I updated my phone at least once. My Update is from the 5th of october.
Updating with no sim did not work. As I bought my from from an operator I is surely sim locked…

It is a shame…

Hope that your info to the support will bring some movement and solve this issue.

Updated my company phone (Samsung) with orange as operator, no problem to get the latest update ( Nov 2019)

Fairphones are not simlocked.

4 Likes

hiiiijiisdfszfzsfzsedf !!!
it works !!!

perfectly right !
i have double sim
data was on orange SIM
i switch data do free mobile
and here is the UPDATE !!!
youuuuuuhouuuuuuu

shame on orange

5 Likes