Google's Project Zero explains how the practice of altering the Android kernel by phone vendors like Samsung lessens security by adding attack surface (Liam Tung/ZDNet)