• Gooey0210@sh.itjust.works
    2·
    2 years ago

    It’s from the same devs of aurora store, aurora droid

    And really, so much talking and scepticism around a free and open source app, you can go and check the source, or at least read a review about it (though the app wasn’t update

    OP is recommending a cool app to spark a conversation, but all the replies are just complaints

    Cool people made a cool app, cool people are hosting an alternative fdroid repo so it’s easier and faster for devs to publish their projects for the world to see, and cool people found this app and decided to share with other people

    But those people are just behaving like boomers and saying that everything around is fake, dangerous, and so on

    If somebody cares for security, why would that person even have root in the first place, same with fdroid, if you care for security you shouldn’t use fdroid

    Sorry if i’m being to rough, everything i said is not really addressed to you, i’m just being pissed by people not appreciating somebody’s will to start a nice conversation

    P.s. the last update of this app was like 3 years ago, if somebody cares for security, they should never install an app that old, it’s not even about root or some policies

    • Zak@lemmy.world
      3·
      2 years ago

      I’m not complaining. I’m asking for some evidence this app is trustworthy.

      Security is not binary. Having root can be bad for security, but it doesn’t have to be especially if you’re careful about what apps you grant root to, which is the point of my original comment. Having root can also be a security benefit because it offers more opportunities for detecting and blocking harmful and privacy-invasive apps, as this app does (if it’s trustworthy).

      I don’t think F-Droid with the official repositories is a negative for security either; I suspect it’s less likely to contain outright malware than Google Play, and I’m sure the average app on F-Droid is less likely to be privacy-invasive. Adding random repositories suggested by strangers on the internet can be a different story, and asking who can vouch for the one suggested in this thread seems like a reasonable mitigation to me.

      • Gooey0210@sh.itjust.works
        1·
        2 years ago

        My last comment wasn’t really addressed personally to you, sorry i sounded like that

        Having root is almost never a security benefit, it allows you to close one hole, but opens up 10 new more

        It means you have your bootloader unlocked, you have secure boot disabled which allows for persistent malware. Just having root by itself opens up many more remote, zero click, or just very dangerous exploits

        F-droid is not secure, some of the issues had been resolved, but it’s still not recommended for best practices

        Of course, everything depends on the thread model

        I personally really like fdroid and izzy, and other custom repos. And root is a cool thing, although i don’t have it on my daily driver(but have on my test phone)