It's great that Android is finally forcing PIE, even though the transition may be a bit of a pain, because without it ASLR is much less effective.
Why not set the minimum target to 4.1 and just tell people to buy newer hardware? From this version distribution <https://mixpanel.com/trends/#report/android_frag> it seems like a large portion of people are running 4.1 or higher. I realize a lot of GP apps are targeted to people in countries who may not have access to the latest and greatest hardware, but it seems like if users care enough about security to install these apps, they shouldn't be running them on obsolete hardware, especially if their device manufacturer stopped shipping OS / security updates. On Tue, Oct 14, 2014 at 10:32 AM, Hans-Christoph Steiner < [email protected]> wrote: > > SQLCipher, IOCipher, android-ffmpeg, Orbot, GnuPrivacyGuard, and Lil Debi > are > affected. CacheWord, NetCipher, TrustedIntents, and F-Droid are not > affected. > > If your minimum target SDK is android-16 (aka 4.1) then it will be easy to > deal with. Otherwise, it'll be a chunk of work that is annoying to do. > > In the meantime, we should set maxSdkVersion="20" in our apps so that > people > don't try to install it on Android L. > > .hc > > David Oliver wrote: > > I understand from a prior post that Android L introduces new requirements > > for native executables (and/or native libraries). Can someone advise > here > > which of the GP libraries and apps are likely to be impacted in the near > > term? > > > > For my part, and to my limited understanding, the > > Courier/Paik/Idaho/YakReader suite will not be impacted by these new > > requirements directly (unless SQLCipher, IOCipher and/or CacheWord are > > impacted). > > > > Thanks, > > Dave O > > > > David M. Oliver | [email protected] | http://olivercoady.com | > > http://dmo.tel | Ostel: oliv | +1 970 368 2366 > > > > > > > > _______________________________________________ > > Guardian-dev mailing list > > > > Post: [email protected] > > List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev > > > > To Unsubscribe > > Send email to: [email protected] > > Or visit: > https://lists.mayfirst.org/mailman/options/guardian-dev/hans%40guardianproject.info > > > > You are subscribed as: [email protected] > > > > -- > PGP fingerprint: 5E61 C878 0F86 295C E17D 8677 9F0F E587 374B BE81 > _______________________________________________ > Guardian-dev mailing list > > Post: [email protected] > List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev > > To Unsubscribe > Send email to: [email protected] > Or visit: > https://lists.mayfirst.org/mailman/options/guardian-dev/chrisballinger%40gmail.com > > You are subscribed as: [email protected] >
_______________________________________________ Guardian-dev mailing list Post: [email protected] List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev To Unsubscribe Send email to: [email protected] Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/archive%40mail-archive.com You are subscribed as: [email protected]
