Remember Stagefright, the Android vulnerability that affected nearly 1 billion phones running Android versions from 2.2 to 5.1? Well, you may have heard that it's back -- and it's even nastier than before.
Where the first version of the vulnerability could be accessed via an MMS message, Stagefright 2.0 can travel via specially adapted and apparently innocuous MP3/MP4 files -- and those files can be stored inside apps, so just avoiding freebie music or movie files won't protect you.

1. A researcher discovers a vulnerability.
2. Google says "la la la can't hear you" for a year or so.
3. After lots of media coverage Google says it'll fix the hole.
4. Google creates a fix and promises to bring it to the Nexus range in two or three months.
5. Google gives the fix to manufacturers who say they'll roll it out at some point, maybe, when they get round to it.
6. The manufacturers get round to it and submit their version to the phone networks, who say they'll totally bring it out at some point, oh yes siree!
7. The vulnerability that the fix will eventually fix evolves so that the fix doesn't fix it any more.
8. Google says "la la la can't hear you".
Let's talk about Steve Jobs because Android fans really like that
Eight years after unveiling the iPhone, Steve Jobs told the D5 conference what he thought of the phone networks, especially US ones. "The carriers now have gained the upper hand in terms of the power of the relationship with the handset manufacturers," he said. "And they're starting to tell the handset manufacturers what to build."