[Replicant] is replicant 6 insecure? does google update android 6?

[Denis 'GNUtoo' Carikli]

On Mon, 9 Mar 2020 16:56:40 +0100
a <ninhar at inbox.lv> wrote:

> https://www.zdnet.com/article/android-security-warning-one-billion-devices-no-longer-getting-updates/

We were told at the last FOSDEM that LineageOS kept maintaining the
source of a given Android version longer than Google, and in practice
we probably saw patches being added to fix security issues after Google
stopped supporting Android 6.

However more recently I saw less and less patches from LineageOS for
Android 6, and I'm not sure there are new changes anymore, so Replicant
6 probably has many security vulnerabilities.

In another hand we didn't implement backdoors and continue to fix
privacy issues in Replicant 6 as well, and while we're working on
Replicant 9, we still have people using Replicant 6 as Replicant 9 is
not ready yet.

We're also not sure yet on how much work would be needed to support
other devices than the Galaxy SIII (GT-I9300) for Replicant 9.
That also depends a lot on the specific device.

Denis.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.osuosl.org/pipermail/replicant/attachments/20200310/584f90db/attachment.asc>