3 ms·
F-Droid is strictly more secure than the Apple App Store. The same MITM attack works on Apple, but since the App Store doesn't have reproducible builds, you hav
by lern_too_spel 3y ago
F-Droid is strictly more secure than the Apple App Store. The same MITM attack works on Apple, but since the App Store doesn't have reproducible builds, you have no way to detect it. The App Store is the least secure of the mobile app stores that most HNers use. You've been sold a bill of goods.
Aurora isn't an app store. It is an unauthorized client for the Play Store.
- kelnos 3y agoI don't disagree with your overall point, I don't think, but having reproducible builds doesn't -- alone -- make a distribution method more secure. I can publish an app with a bunch of security holes and maybe even some obfuscated malicious behavior, but if the F-Droid maintainers don't notice, it doesn't matter one bit that a user could reproduce the build they made. Of course, I don't know if we can say that Apple's app store approval process filters out more or fewer security issues or malicious apps than F-Droid's vetting process does.