3 ms·
> Obsidian could hugely benefit from an independent audit of the closed source base. They do a yearly audit: https://obsidian.md/security https://obsidian.md/s
by wiether 1y ago
> Obsidian could hugely benefit from an independent audit of the closed source base.
They do a yearly audit: https://obsidian.md/security https://obsidian.md/security
- yencabulator 1y agoMeanwhile, any plugin can do anything.
- wiether 1y agoSure, but that's not the issue raised by the article And if it was the other way around, I guess people would be complaining about how closed it is for the developers I think part of its success is due to the ecosystem composed of hundreds of plugins.
- yencabulator 1y agoIt reads like that to me: > Since Obsidian isn’t distributed through the Mac App Store, it isn’t required to use sandboxing, > Combined with the fact that its source code isn’t public, > And that many users rely heavily on Community Plugins (some of my friends have customized their Obsidian setups so much that I barely recognize the app), > And that users often grant Obsidian access to sensitive folders like iCloud Drive, Documents, or Desktop (protected by TCC or not), etc to open Vault. > To me, this represents a very serious risk.