Cwa-wishlist: User warning when Android security patch level is too low

[AlptraumSAP]

For security reasons, the app should warn the user when the android patchlevel is too low, especially before enabling bluetooth.

---

Internal Tracking ID: EXPOSUREAPP-2173

[tomjschwanke]

This could potentially scare users from using the app.
I see the security aspect though.

There are settings to have Bluetooth LE beacon scanning active, even if Bluetooth itself is "switched off", however the app doesn't recognize this and warns about disabled Bluetooth.

Either Bluetooth is always on, even when "turned off" (thus enabling beacon scanning) and this wouldn't fix that

or

The app (/API) needs to be able to work with BLE scanning only without displaying a warning about disabled Bluetooth.

I don't know if the vulnerabilities only affect classic BT

[akuckartz]

A user using an insecure OS generally has more severe problems than Bluetooth. It is not the task of Apps to warn users that the foundation they are running on is insecure.

[tkowark]

Thanks for this proposal. We'll move it into the cwa-wishlist repository where it might be available for feedback for a wieder audience.