[guardian-dev] GP libraries and apps that will be impacted by Android L changes?

Hans-Christoph Steiner hans at guardianproject.info
Tue Oct 14 15:44:16 EDT 2014


Both of those are based on Google Play devices.  Those stats do not include
the non-Google Play devices.  There are probably as many non-Play devices out
there as there official Google ones.

About telling people to buy a new device: consider that $200 is a good monthly
salary in main of the places where Android is common.

.hc

Kumar Sukhani wrote:
> More reliable source for version distribution
> https://developer.android.com/about/dashboards/index.html
> 
> On Wed, Oct 15, 2014 at 12:48 AM, Chris Ballinger <chrisballinger at gmail.com>
> wrote:
> 
>> It's great that Android is finally forcing PIE, even though the transition
>> may be a bit of a pain, because without it ASLR is much less effective.
>>
>> Why not set the minimum target to 4.1 and just tell people to buy newer
>> hardware? From this version distribution
>> <https://mixpanel.com/trends/#report/android_frag> it seems like a large
>> portion of people are running 4.1 or higher. I realize a lot of GP apps are
>> targeted to people in countries who may not have access to the latest and
>> greatest hardware, but it seems like if users care enough about security to
>> install these apps, they shouldn't be running them on obsolete hardware,
>> especially if their device manufacturer stopped shipping OS / security
>> updates.
>>
>> On Tue, Oct 14, 2014 at 10:32 AM, Hans-Christoph Steiner <
>> hans at guardianproject.info> wrote:
>>
>>>
>>> SQLCipher, IOCipher, android-ffmpeg, Orbot, GnuPrivacyGuard, and Lil Debi
>>> are
>>> affected.  CacheWord, NetCipher, TrustedIntents, and F-Droid are not
>>> affected.
>>>
>>> If your minimum target SDK is android-16 (aka 4.1) then it will be easy to
>>> deal with.  Otherwise, it'll be a chunk of work that is annoying to do.
>>>
>>> In the meantime, we should set maxSdkVersion="20" in our apps so that
>>> people
>>> don't try to install it on Android L.
>>>
>>> .hc
>>>
>>> David Oliver wrote:
>>>> I understand from a prior post that Android L introduces new
>>> requirements
>>>> for native executables (and/or native libraries).  Can someone advise
>>> here
>>>> which of the GP libraries and apps are likely to be impacted in the near
>>>> term?
>>>>
>>>> For my part, and to my limited understanding, the
>>>> Courier/Paik/Idaho/YakReader suite will not be impacted by these new
>>>> requirements directly (unless SQLCipher, IOCipher and/or CacheWord are
>>>> impacted).
>>>>
>>>> Thanks,
>>>> Dave O
>>>>
>>>> David M. Oliver | david at olivercoady.com | http://olivercoady.com |
>>>> http://dmo.tel | Ostel: oliv | +1 970 368 2366
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Guardian-dev mailing list
>>>>
>>>> Post: Guardian-dev at lists.mayfirst.org
>>>> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>>>>
>>>> To Unsubscribe
>>>>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>>>>         Or visit:
>>> https://lists.mayfirst.org/mailman/options/guardian-dev/hans%40guardianproject.info
>>>>
>>>> You are subscribed as: hans at guardianproject.info
>>>>
>>>
>>> --
>>> PGP fingerprint: 5E61 C878 0F86 295C E17D  8677 9F0F E587 374B BE81
>>> _______________________________________________
>>> Guardian-dev mailing list
>>>
>>> Post: Guardian-dev at lists.mayfirst.org
>>> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>>>
>>> To Unsubscribe
>>>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>>>         Or visit:
>>> https://lists.mayfirst.org/mailman/options/guardian-dev/chrisballinger%40gmail.com
>>>
>>> You are subscribed as: chrisballinger at gmail.com
>>>
>>
>>
>> _______________________________________________
>> Guardian-dev mailing list
>>
>> Post: Guardian-dev at lists.mayfirst.org
>> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>>
>> To Unsubscribe
>>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>>         Or visit:
>> https://lists.mayfirst.org/mailman/options/guardian-dev/kumarsukhani%40gmail.com
>>
>> You are subscribed as: kumarsukhani at gmail.com
>>
>>
> 
> 

-- 
PGP fingerprint: 5E61 C878 0F86 295C E17D  8677 9F0F E587 374B BE81


More information about the Guardian-dev mailing list