▲ -3 ▼ Komi Store: Android app store to install and update apps hosted on GitHub, Codeberg & Forgejo (github.com) submitted 2 months ago* by Deep@mander.xyz to c/foss@beehaw.org 28 comments fedilink hide all child comments
[–] artyom@piefed.social 1 point 2 months ago* (1 child) One could say the same about the FDroid app. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) FDroid's official repository includes fairly strict requirements for apps they allow, meaning you get a level of confidence that those apps meet those requirements. You can add custom repos in the app, but it's not the default flow. To use a recent example, it's like comparing the Arch official repos to AUR. Not that there isn't value in a tool that can download apps for you from GitHub, but it's not really fair to compare that to F-Droid. You're generally safer on F-Droid's official repo than with random projects off GitHub, and potentially even safer than downloading official releases of apps on F-Droid directly from the releases page. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) It's completely fair to compare on the qualities which were specified. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) The qualities that were specified were security. Do you plan to actually explain how both FDroid and random GitHub downloads are equally insecure? permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) The qualities that were specified was the ability to install the apps through the browser without the "attack vector" of an app installer. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) In that case, both FDroid and the browser are intermediaries and potential attack vectors. You go through the same number of middlemen. One just verifies the packages for you. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) So you agree that they're comparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] TehPers@beehaw.org 2 points 2 months ago (1 child) FDroid's official repository includes fairly strict requirements for apps they allow, meaning you get a level of confidence that those apps meet those requirements. You can add custom repos in the app, but it's not the default flow. To use a recent example, it's like comparing the Arch official repos to AUR. Not that there isn't value in a tool that can download apps for you from GitHub, but it's not really fair to compare that to F-Droid. You're generally safer on F-Droid's official repo than with random projects off GitHub, and potentially even safer than downloading official releases of apps on F-Droid directly from the releases page. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) It's completely fair to compare on the qualities which were specified. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) The qualities that were specified were security. Do you plan to actually explain how both FDroid and random GitHub downloads are equally insecure? permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) The qualities that were specified was the ability to install the apps through the browser without the "attack vector" of an app installer. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) In that case, both FDroid and the browser are intermediaries and potential attack vectors. You go through the same number of middlemen. One just verifies the packages for you. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) So you agree that they're comparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] artyom@piefed.social 0 points 2 months ago (1 child) It's completely fair to compare on the qualities which were specified. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) The qualities that were specified were security. Do you plan to actually explain how both FDroid and random GitHub downloads are equally insecure? permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) The qualities that were specified was the ability to install the apps through the browser without the "attack vector" of an app installer. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) In that case, both FDroid and the browser are intermediaries and potential attack vectors. You go through the same number of middlemen. One just verifies the packages for you. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) So you agree that they're comparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] TehPers@beehaw.org 1 point 2 months ago (1 child) The qualities that were specified were security. Do you plan to actually explain how both FDroid and random GitHub downloads are equally insecure? permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) The qualities that were specified was the ability to install the apps through the browser without the "attack vector" of an app installer. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) In that case, both FDroid and the browser are intermediaries and potential attack vectors. You go through the same number of middlemen. One just verifies the packages for you. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) So you agree that they're comparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] artyom@piefed.social 0 points 2 months ago* (1 child) The qualities that were specified was the ability to install the apps through the browser without the "attack vector" of an app installer. permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) In that case, both FDroid and the browser are intermediaries and potential attack vectors. You go through the same number of middlemen. One just verifies the packages for you. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) So you agree that they're comparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] TehPers@beehaw.org 1 point 2 months ago (1 child) In that case, both FDroid and the browser are intermediaries and potential attack vectors. You go through the same number of middlemen. One just verifies the packages for you. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago (1 child) So you agree that they're comparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] artyom@piefed.social 0 points 2 months ago (1 child) So you agree that they're comparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] TehPers@beehaw.org 1 point 2 months ago (1 child) If you have tunnel vision, then sure. In fact, it's just as comparable as downloading from realappmirror.ru where you have the same number of intermediaries. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] artyom@piefed.social 0 points 2 months ago* (1 child) I don't have "tunnel vision" and I don't know what that thing is. Perhaps you'd like to continue trying to explain how they're incomparable? permalink fedilink source parent hideshow 2 child comments replies: [–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] TehPers@beehaw.org 2 points 2 months ago (1 child) I already did. If you have nothing of value to add, then I'm done discussing this. permalink fedilink source parent hideshow 2 child comments replies: [–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent
[–] artyom@piefed.social 0 points 2 months ago I have nothing to add because I've already addressed this. Now it's your turn. If you're not going to answer my question, then feel free to stop replying to me. permalink fedilink source parent