Marcel Waldvogel ⛺ WHY2025<p><span class="h-card" translate="no"><a href="https://chaos.social/@kubikpixel" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>kubikpixel</span></a></span> <span class="h-card" translate="no"><a href="https://det.social/@beoz" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>beoz</span></a></span> <br>This is definitely an important step. But as we discussed elsewhere, embedded systems are an unsolved problem. I just learnt a few days ago, that new security-critical embedded systems are being sold by vendors *as of today*, which are still shipped with <a href="https://waldvogel.family/tags/Android9" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Android9</span></a>, which is end-of-life for 3 years now.</p><p>Those devices are likely to be used for 10-15 years, so some will undoubtedly cross <a href="https://waldvogel.family/tags/y2k38" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>y2k38</span></a>. And they will surely continue to be sold for some time …</p>