Chris, I think this is a really good question that goes to the heart of
what the community working on information security for activists and
journalists is trying to achieve.
We have to find a balance between encouraging users to improve their
overall security, and reaching as many users as
We struggle with Psiphon Gingerbread support as well. Much less than 1% of
our users are Gingerbread, but that's still tens of thousands of users
whose hearts we don't want to break. So we keep supporting it.
Personally, I'd love to drop it. It's burdensome. So y'all should drop
support for
I think it would be the best that you check based on your user base if you
need to support it or not.
Check you server logs for requests user agent and see how many *active* 2.x
devices you still have. Or implement some analytic requests in your app to
see that. That will answer all your
If we were the driving force keeping people on old phones, then yes it
would be bad. I think our support of old phones barely registers when
people are making the decision to use an old phone that is not updated.
Money is probably the biggest factor, then the time it takes to make
changes.
says the iOS developer :)
We play with the cards we are dealt over here in Droidville. When we can
avoid vulnerabilities we do. I agree, relying on WebView is a bad idea,
and we have actively avoided doing that for the very reason you mention.
Similarly we compile in our versions of OpenSSL
Isn't it a security risk to support users on vulnerable versions of
Android? If users need the protection of Tor or other tools, then
supporting users on a vulnerable OS could do more harm than good by giving
people a false sense of security. For example, isn't there a RCE for
pre-4.4 WebView that
Michael Rogers:
> On 01/08/16 16:50, Nathan of Guardian wrote:
>> Three years ago in Thailand, I bought a $50USD 6 inch wifi only tablet
>> device running 4.0 ICS. I also bought a $100USD smartphone running
>> 2.3.6, which seemed to be the last of its kind.
>>
>> We do still see support requests
On Thu, Jul 28, 2016, at 07:30 AM, Michael Rogers wrote:
> It seems that devices running Android 2.3 (Gingerbread) and earlier are
> rarely seen by the Play Store these days:
>
> https://developer.android.com/about/dashboards/index.html
>
> Over the last couple of years I've heard stories
