logoalt Hacker News

1vuio0pswjnm7 • today at 10:02 PM • 1 reply • view on HN

"F-Droid 2.0 now fetches and installs app updates by default."

Why not download source, (review, edit) and compile on the device, e.g., using Termux

Is "convenience" the rationale for the F-Droid app

Maybe it's the same rationale that drives Linux users toward "binary package managers"

Learning UNIX on BSD instead of Linux may have biased me toward compiling software myself. I know that others may prefer to download and install binaries

But with a project like F-Droid the founding principle seems to be that closed source apps, and Google's Play Store data collection scheme, should be avoided. If that's true, then it makes sense for users to compile their own apps, if they can. Why not encourage and faciltate user review and compilation of app source code

Then, for those users, there's no need for an F-Droid app or efforts to try to hide it

It's too bad app source code generally isn't mirrored publicly like, e.g., BSD or Linux software, using the same public mirrors. (Many are run by universities, not corporations) If there are exceptions, the number of mirrors and the number of apps mirrorred is relatively small by comparison

The repositories, e.g., Github, etc., used to distribute app source code seem to be generally corporate-controlled


Replies

NoahZuniga • today at 10:08 PM

Running a malicious build script is just as bad as running a malicious app, so I don´t see why you want that? Also F-droid has fully reproducible builds, so you can be sure you'll get the same binary.