25-01-2015 19:44 via

Google Defends Policy That Leaves Most Android Devices Unpatched

Google on Friday defended its decision to stop patching WebView, a core component of Android, on versions older than 4.4, aka "KitKat," saying that the huge code base is unsafe to fix.
"Until recently, we have also provided backports for the version of WebKit that is used by WebView on Android 4.3 and earlier," wrote Adrian Ludwig, Android lead security engineer on Google+. "But WebKit alone is over 5 million lines of code and hundreds of developers are adding thousands of new commits every
Read more »