[guardian-dev] GP libraries and apps that will be impacted by Android L changes?

[Chris Ballinger]

It's great that Android is finally forcing PIE, even though the transition
may be a bit of a pain, because without it ASLR is much less effective.

Why not set the minimum target to 4.1 and just tell people to buy newer
hardware? From this version distribution
<https://mixpanel.com/trends/#report/android_frag> it seems like a large
portion of people are running 4.1 or higher. I realize a lot of GP apps are
targeted to people in countries who may not have access to the latest and
greatest hardware, but it seems like if users care enough about security to
install these apps, they shouldn't be running them on obsolete hardware,
especially if their device manufacturer stopped shipping OS / security
updates.

On Tue, Oct 14, 2014 at 10:32 AM, Hans-Christoph Steiner <
hans at guardianproject.info> wrote:

>
> SQLCipher, IOCipher, android-ffmpeg, Orbot, GnuPrivacyGuard, and Lil Debi
> are
> affected.  CacheWord, NetCipher, TrustedIntents, and F-Droid are not
> affected.
>
> If your minimum target SDK is android-16 (aka 4.1) then it will be easy to
> deal with.  Otherwise, it'll be a chunk of work that is annoying to do.
>
> In the meantime, we should set maxSdkVersion="20" in our apps so that
> people
> don't try to install it on Android L.
>
> .hc
>
> David Oliver wrote:
> > I understand from a prior post that Android L introduces new requirements
> > for native executables (and/or native libraries).  Can someone advise
> here
> > which of the GP libraries and apps are likely to be impacted in the near
> > term?
> >
> > For my part, and to my limited understanding, the
> > Courier/Paik/Idaho/YakReader suite will not be impacted by these new
> > requirements directly (unless SQLCipher, IOCipher and/or CacheWord are
> > impacted).
> >
> > Thanks,
> > Dave O
> >
> > David M. Oliver | david at olivercoady.com | http://olivercoady.com |
> > http://dmo.tel | Ostel: oliv | +1 970 368 2366
> >
> >
> >
> > _______________________________________________
> > Guardian-dev mailing list
> >
> > Post: Guardian-dev at lists.mayfirst.org
> > List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> >
> > To Unsubscribe
> >         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
> >         Or visit:
> https://lists.mayfirst.org/mailman/options/guardian-dev/hans%40guardianproject.info
> >
> > You are subscribed as: hans at guardianproject.info
> >
>
> --
> PGP fingerprint: 5E61 C878 0F86 295C E17D  8677 9F0F E587 374B BE81
> _______________________________________________
> Guardian-dev mailing list
>
> Post: Guardian-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>
> To Unsubscribe
>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>         Or visit:
> https://lists.mayfirst.org/mailman/options/guardian-dev/chrisballinger%40gmail.com
>
> You are subscribed as: chrisballinger at gmail.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20141014/613006d0/attachment.html>