News for hackers. Stuff that matters.
Re:Germany wants smartphone makers to offer 7 years of softw... by Fradow on Wednesday September 08, 2021 @07:49AM (#28455713)
In fact, Chrome does use its own TLS libs and don't have any trouble connecting on TLS 1.2 on Android 4.4.

On the other hand, nearly every application use the base OS TLS libs and cannot connect anymore to servers that disabled TLS 1.0/1.1 on Android 4.4.

Re:Germany wants smartphone makers to offer 7 years of softw... by fulafel on Thursday September 09, 2021 @12:54AM (#28466371)
Yep. But this is probably a good thing, since those out of date libs are likely to be vulnerable from today's POV.

To engineer the app work remotely safely on such vendor-abandoned devices you need to basically assume you're running on a malware or rootkit compromised device, and just hope that by using your self bundled components you'll have better chances to survive in the core wars game because your app is not being specifically targeted.