Android

711 readers

1 users here now

Android news for android developers. Everything that happens in android world.

For Android development specific topics please see /c/android_dev

The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License

founded 1 year ago

MODERATORS

erlingur@programming.dev

askat@programming.dev

Ategon@programming.dev

Google officially suspends support for Android Lollipop after a decade (www.androidcentral.com)

submitted 4 months ago by askat@programming.dev to c/android@programming.dev

7 comments fedilink hide all child comments

Google will discontinue official support for Android Lollipop OS, which debuted with Nexus 6.
Also known as Android 5.0, it was widely popular for introducing Material You to Android devices.
The said OS will no longer receive Google Play Updates, citing that less than one percent of active devices are running it.

you are viewing a single comment's thread
view the rest of the comments

[–] huginn@feddit.it 3 points 4 months ago (1 children)

Yeah but also vulnerabilities in older android remain unpatchable.

EG: Strandhogg 2.0 can't be patched - you just have to set min SDK 28.

[–] 0x0@programming.dev 2 points 4 months ago (1 children)

I'm sorry, what? Setting min SDK is, itself, a patch. I'm sure Google could backport that patch if they so desired. It's not Spectre, it's a software vulnerability.

There's no technical reason not to provide security backports to software. This is intentional.

[–] huginn@feddit.it 2 points 4 months ago

You can't modify activity intent apis on older versions of Android to fix intentjacking is my understanding. It fundamentally breaks the versions.

In theory they could've supported down to sdk26 afaik. Android Sec is ancillary to my main day to day.