News for hackers. Stuff that matters.

A comment on VLC: App Stores Were a Mistake. Parent comment

Re:VLC: App Stores Were a Mistake by orf on Saturday March 23, 2024 @08:28AM (#39799440)
Sure there is. You’re increasing the scope of the key to include a third party, but… it’s one that controls the OS, distribution channels, publishing platform, SDK, the tools used to publish APKs, even the device drivers on your phone.

If they want to maliciously modify the VLC apk, there isn’t anything you can do to stop them.

[ Parent | on HN ]
Re:VLC: App Stores Were a Mistake by emj on Saturday March 23, 2024 @11:09AM (#39800495)
I think we all understand why Google might have a need to sign the binaries themselves. The point is that if they are creating binaries it should be signed by Google using a key uploaded by me it is just unnecessary.
[ Parent | on HN ]