I'm concerned that old versions of Android may be hacked through unpatched WebViews (in PhoneGap and other apps), exposing Activesync email data, and other sensitive information.

To mitigate this, I'm considering blocking old devices from accessing the server.

  • Is this a legitimate concern?

  • How would I block these devices?

This concern stems from this Forbes article saying Google will not be deploying patches to old phones, and will rely on 3rd parties instead. Given that Android malware has been increasing in frequency, this may become an urgent situation

  • Wow that's a quick end of life for an OS. Considering a lot of applications wrap WebViews of their mobile site this is a little concerning to me. User agent strings contain the Android version generally. You might be able to block on that. – RoraΖ Jan 14 '15 at 17:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.