Conversation

Replying to
My tiny patch for using 64-bit WebView processes with the standalone WebView is still necessary (github.com/AndroidHardeni), but that's easy to maintain compared to the somewhat less trivial patch for Monochrome which needed adjustments for most releases: github.com/AndroidHardeni
1
3
AndroidHardening uses Monochrome to provide both the Chromium browser and WebView from the same app. It maps the same shared object and other components from the apk for both frontends. This substantially cuts down build time, storage and memory usage compared to separate apps.
1
3
Using 64-bit processes provides much more than just high entropy ASLR and canaries. It's required by github.com/AndroidHardeni and will be needed for ARMv8.3 pointer auth along with ARMv8.5 memory tagging and Branch Target Indicators (coarse CFI). 32-bit will be purged soon enough.
1
4