[PJBankard]

Israeli security firm Perception Point disclosed the flaw in a blog post Tuesday, but it wasn't immediately clear if the bug had been privately reported to Google, which develops the Android software.

You would think that firms would contact the affected software manufacturers before blogging. Seems dumb not to.

[Swordmaker]

You would think that firms would contact the affected software manufacturers before blogging. Seems dumb not to.

I agree. They seem to have done so with the Linux community. Why not with Google and Android?

[Swordmaker]

You would think that firms would contact the affected software manufacturers before blogging. Seems dumb not to.

Re-reading the article, I suspect Google does know about the flaw. . . but Google/Alphabet is learning to keep press responses close to the vest like Apple does. Any response other than "No comment" can leave them open to legal action. Saying they are aware of the flaw might leave them open to lawsuits from disgruntled users who claim being damaged by the flaw because Android was not updated quickly enough. Saying they were unaware of the issue may trigger a lawsuit by disgruntled users claiming they should have created better software to protect their users and then KNOWN in advance about the flaw. Damned if they do and Damned if they don't. Silence is always legally better.