• mcv@lemmy.zip
    link
    fedilink
    arrow-up
    104
    ·
    1 day ago

    Do they have any evidence that F-droid serves more malware than Play Store?

    • pulsewidth@lemmy.world
      link
      fedilink
      arrow-up
      76
      ·
      1 day ago

      I was curious of the same a few days back, and my research couldn’t find a single instance of malware being distributed by the F-Droid store.

    • notarobot@lemmy.zip
      link
      fedilink
      arrow-up
      17
      ·
      1 day ago

      According to them, when they added a similar registration process and requirements for the playstore they saw a SIGNIFICANT drop on malware.

      • JackbyDev@programming.dev
        link
        fedilink
        English
        arrow-up
        9
        ·
        12 hours ago

        I don’t find that shocking, and to be honest, I don’t really see too much of a problem with forcing people to give that information to be on the play store. But to let people make programs that run on the hardware at all is crazy. Forbidding third party app stores is the most anti competitive bullshit ever.

    • Mwa@thelemmy.club
      link
      fedilink
      English
      arrow-up
      21
      arrow-down
      1
      ·
      edit-2
      1 day ago

      Since they force everything to be open source and i think has strict rules, no

      • Rikudou_Sage@lemmings.world
        link
        fedilink
        English
        arrow-up
        27
        ·
        1 day ago
        1. Write an open source malware
        2. Freely publish it everywhere because everyone assumes someone checked it, because it’s open source, you know?
        3. ???
        4. Profit
        • thevoidzero@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          12 hours ago

          That’s the thing though if it’s open source and 99.9% don’t check that 0.1% checking it will be enough.

          • Rikudou_Sage@lemmings.world
            link
            fedilink
            arrow-up
            2
            ·
            12 hours ago

            The trouble with smaller open source software is that there’s no 0.1% checking it. And from time to time a small projects becomes widely used and everyone assumes someone already checked it; it’s a widely used open source software, after all.

            • thevoidzero@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              12 hours ago

              I think most early users do check further than open source licenses. It’s possible they’ll add things later, but if they add after it has enough users we have significant number of users to have some people check. And if the user base is small then they’re probably more involved, or are reading/modifying code for their use cases.

              Of course it’s not foolproof, but it has worked for a long time because of things like that

          • Rooster326@programming.dev
            link
            fedilink
            arrow-up
            1
            ·
            edit-2
            12 hours ago

            By definition in order to have . 1% then the sample size must be greater than 1,000. The vast majority of open source projects will not get to this level.

            • thevoidzero@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              12 hours ago

              I think for a open source projects with such a low number of users, the first few users will definitely look further than “it’s open source”.