[Replicant] GNU IceCat on Android + Replicant Really Needs a Better Browser
Tyler
tyler at cyb3r.space
Fri Dec 25 05:28:40 UTC 2015
It has come to my attention (and I thought perhaps those on these two
mailing lists would want to know) that the folks at GNU have been
releasing GNU IceCat for Android, including binary builds. It's not yet
in F-Droid, but I hear that its on the F-Droid folks to-do list:
https://savannah.gnu.org/forum/forum.php?forum_id=8428
Unfortunately this still won't work on Replicant, since OpenGL is still
missing - I got this error at runtime:
org.mozilla.gecko.gfx.GLController$GLControllerException: No available EGL configurations Error 12289
I don't have time nor energy nor desire nor knowledge to debug and hack
an OpenGL implementation onto Replicant. I would be willing to throw
some money at someone else to do that, though... Perhaps BountySource?
So Replicant folks are still stuck with the WebView based browser that
Google officially dropped support, updates and security patches for last
January. This browser has numerous exploits in Metasploit, publicly
available for anyone to use. ("find . -type f | grep android | wc -l"
in the base of the metasploit repo returns 32, though that may be a tad
high) Most of the exploits I read through seemed like Cross Site
Scripting vulnerabilities trying to get privileged code execution one
way or another. I haven't actually tested to see if any of them worked
on my device, yet.
If the open source community already has this number of vulns, it is
probable that the advanced persistent threats of the world have some
hoarded exploits for this unsupported old platform at this point.
Here's to hoping 2016 will be a better year for freedom, privacy and
security.
Cheers,
--
PGP key, Signal, & OTR encryption avaliable upon request.
Learn to use PGP email encryption:
https://ssd.eff.org/en/module/how-use-pgp-windows
https://ssd.eff.org/en/module/how-use-pgp-mac-os-x
https://ssd.eff.org/en/module/how-use-pgp-linux
Signal: https://whispersystems.org/
Off-the-record: https://otr.cypherpunks.ca/
More information about the Replicant
mailing list