Re:Germany wants smartphone makers to offer 7 years of softw...
by fulafel on Thursday September 09, 2021 @12:54AM
(#28466371)
Yep. But this is probably a good thing, since those out of date libs are likely to be vulnerable from today's POV.
To engineer the app work remotely safely on such vendor-abandoned devices you need to basically assume you're running on a malware or rootkit compromised device, and just hope that by using your self bundled components you'll have better chances to survive in the core wars game because your app is not being specifically targeted.
On the other hand, nearly every application use the base OS TLS libs and cannot connect anymore to servers that disabled TLS 1.0/1.1 on Android 4.4.