Ah nice, remote holes and local kernel holes galore. At this point, I mostly deal with smart phone security by not actually using mine as a smart phone. It's not connected to my Google account, or any other online account; just a phone with a pretty screen and an application runtime. Obviously I can't look at email from it. That's a very small price, vs. having my entire online presence compromised by some teenage bigot at an Internet cafe.