• Zak@lemmy.world
    3·
    2 years ago

    I’m not complaining. I’m asking for some evidence this app is trustworthy.

    Security is not binary. Having root can be bad for security, but it doesn’t have to be especially if you’re careful about what apps you grant root to, which is the point of my original comment. Having root can also be a security benefit because it offers more opportunities for detecting and blocking harmful and privacy-invasive apps, as this app does (if it’s trustworthy).

    I don’t think F-Droid with the official repositories is a negative for security either; I suspect it’s less likely to contain outright malware than Google Play, and I’m sure the average app on F-Droid is less likely to be privacy-invasive. Adding random repositories suggested by strangers on the internet can be a different story, and asking who can vouch for the one suggested in this thread seems like a reasonable mitigation to me.

    • Gooey0210@sh.itjust.works
      1·
      2 years ago

      My last comment wasn’t really addressed personally to you, sorry i sounded like that

      Having root is almost never a security benefit, it allows you to close one hole, but opens up 10 new more

      It means you have your bootloader unlocked, you have secure boot disabled which allows for persistent malware. Just having root by itself opens up many more remote, zero click, or just very dangerous exploits

      F-droid is not secure, some of the issues had been resolved, but it’s still not recommended for best practices

      Of course, everything depends on the thread model

      I personally really like fdroid and izzy, and other custom repos. And root is a cool thing, although i don’t have it on my daily driver(but have on my test phone)