4 ms·
Apps can download code too, and often do
by zadikian 7mo ago
Apps can download code too, and often do
- palata 7mo agoWell the idea is that the client should be open source, and audited. If you run a proprietary app, you have to blindly trust it (just like if you access a webapp). In terms of security, the best is an open source app, IMO.
- Zak 7mo agoOpen source helps, but if you didn't build it yourself, you'll need to trust whoever did. F-Droid reproducible builds help in that you only need to trust either F-Droid or the developer, not both. The browser tends to be safer because it has a stronger sandbox than native apps on a mobile OS. It's meant to be able to run potentially malicious code with a very limited blast radius.
- zadikian 7mo agoAlso even obfuscated JS code is easier to understand than machine code, if you're trying to tell what some non-open-source thing is doing
- palata 7mo ago> Open source helps, but if you didn't build it yourself, you'll need to trust whoever did. You need to audit the code. If you are not capable of doing that, you need to trust someone to do it.
- deleted 7mo ago[deleted]