News for hackers. Stuff that matters.
Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by yjftsjthsd-h on Wednesday February 05, 2025 @09:57AM (#42949310)
Note that most of that page is a matter of the authors having a completely different security model than F-Droid rather than what I would consider to be true defects.
Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by udev4096 on Wednesday February 05, 2025 @10:11AM (#42949545)
It's not. Stop being in an echo chamber. Refer to this post for more valid criticism: https://news.ycombinator.com/item?id=42653176
Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by glenstein on Wednesday February 05, 2025 @11:33AM (#42950970)
Setting aside agreement or disagreement, what about that comment is striking you as symptomatic of coming from an echo chamber?
Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by udev4096 on Wednesday February 05, 2025 @11:48AM (#42951279)
Oh please. It's a factual argument and you've contributed nothing to it apart from steering away from the goalpost
Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by glenstein on Wednesday February 05, 2025 @05:11PM (#42956012)
Let's say I'm doing all of those things, and am prepared to atone for my sins.

And I just want to know what you found echo chamberry about the other comment. Can you enlighten me? Maybe that way I can avoid all of the mistakes that I'm making.

Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by yjftsjthsd-h on Wednesday February 05, 2025 @11:53AM (#42951358)
In order:

It is; the authors appear to be operating in a model where they completely trust app authors and nobody else, though they never actually spell out the threat model (which really should make us view their assessment skeptically anyways), where F-Droid specifically avoids trusting app authors. Nearly all of their objections come down to this single difference.

What echo chamber? I'm not aware of anyone else arguing this position.

That post contains 3 items: One fixed audit finding that only affects initial install of an app, one claim of problems that are unspecified and therefore impossible to assess, and one allegation of poor behavior (which is worth noting but not a security concern).

Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by awalGarg on Wednesday February 05, 2025 @12:24PM (#42951938)
To add insult to the injury, they claim that most people should stick to Play Store - a malware repository controlled by an ad distribution company - for better privacy. We're supposed to take this seriously.
Re:F-Droid Awarded Open Technology Fund's FOSS Sustainabilit... by NotPractical on Wednesday February 05, 2025 @04:18PM (#42955303)
They had a much more convincing argument before the Play Store started forcing the same exact thing that they said was one of the main problems with F-Droid, and F-Droid started providing reproducible builds.