News for hackers. Stuff that matters.

A comment on Barcode scanner app on Google Play infects 10M users with one update. Parent comment

Re:Barcode scanner app on Google Play infects 10M users with... by bityard on Monday February 08, 2021 @01:55PM (#26068502)
The ZXing Barcode Scanner (which is the "official barcode/QR code scanner for Android, as far as _I_ am concerned) is also available on f-droid.org. There's no absolute guarantee that F-Droid apps are malware-free but they have at least been looked at by a competent team of humans, something that is not true of the Play Store.

https://f-droid.org/en/packages/com.google.zxing.client.andr...

[ Parent | on HN ]
Re:Barcode scanner app on Google Play infects 10M users with... by dyingkneepad on Monday February 08, 2021 @02:24PM (#26068913)
Does F-Droid compile the binaries themselves? Or do they just take a look at my github and then trust the .apk I build myself and send them?

I mean, I could very well make an open source app and then load some malware in the apk in addition to the well behaved thing... Are they immune from this attack?

[ Parent | on HN ]
Re:Barcode scanner app on Google Play infects 10M users with... by ashneo76 on Monday February 08, 2021 @02:35PM (#26069042)
F-droid mostly compiles from source. https://f-droid.org/en/docs/FAQ_-_General/#whats-the-differe...
[ Parent | on HN ]