4 ms·
Something does not have to be perfect to be useful; a filter that throws out 50% or 90% of malicious trash is very useful even if a lot of malicious trash get
by PeterisP 5y ago
Something does not have to be perfect to be useful; a filter that throws out 50% or 90% of malicious trash is very useful even if a lot of malicious trash gets through.
The appropriate metric for safety of an app store is not whether you can get attacked, but rather how many users - proportional to all users - get attacked every year.
- fsflover 5y agoThis filter is useless and misleading. Compare to F-Droid or GNU/Linux repositories.
- tekknik 5y agoSo why would someone release malware in f-droid, when the user base is not your average joe and would likely know how to counter or detect any attacks? This is the second person in this thread to think using an open source repo as an example carries weight. There are less users, therefore less malware is released here in the first place and then there’s less load for the malware filters for that that does get through.
- fsflover 5y agoYour argument does not hold for GNU/Linux repositories. There are plenty of good targets there.
- tekknik 5y agoOh sure, that’s why I didn’t include it. But we have historically seen issues with those repos haven’t we? My comment stands, why target f-droid?
- fsflover 5y agoBecause it's technically the same as GNU/Linux repositories (i.e. relies on community and FLOSS). Therefore, one can expect that when it grows, and average Joe starts using it, there will be no huge inflow of malware in it. > But we have historically seen issues with those repos haven’t we? Care to elaborate?
- tekknik 5y agoThe two being open source is an apples to oranges comparison. Here’s one issue we’ve had with these repos: https://lwn.net/Articles/295406/ https://lwn.net/Articles/295406/ Then there’s things like NPM that’s broken quite a few production deployments in spectacularly public ways.
- deleted 5y ago[deleted]
- matheusmoreira 5y agoI've been using Linux for at least 10 years and I have never received malicious software from distribution repositories. For some reason, malware just doesn't make it into the repositories. Apple's filters are clearly garbage.
- tekknik 5y agoThis is called market penetration. Look around, how many linux “desktop” users do you see? Who would you rather own, a few hundred million devices or a few 10 thousand? Using linux as an example here doesn’t work.