Better hide it fast. Little green droid is coming for it
Did my part. Hope it helps
Worth it
So it's the "We can take down what we don't like"-Act
That’s what I hate about the open source crowd’s “everyone can check the source code” argument! How many users actually do that?
It's still a decent argument. While many/most may not be able to read it and understand it it is still better to have some (outside the project) that can look at the code and check it independently.
It must be pretty fucking close to 0%!
It certainly depends on the project and how much it is used. A library someone threw together on an afternoon will unlike a bigger project like NGINX, have little to no external eyes on it.
Though it's not just about reading it. Open source projects (depending on their size) can usually react faster when a bug or problem is found within it.
A dev with malicious intent could easily introduce shit in an update that no one would notice for an extended period of time if ever!
The same can be said with closed source applications. A dev or the entire company (if they where to go down such a path) could also easily introduce something nasty. In that case there would be no way at all to confirm that anything bad or upright malicious was introduced (unless it gets so bad that it would trigger an Anti-Virus or is easily noticeable).
Is Open Source alone making software more secure (or prevent malicious actions)?
No. But it can be a sizable improvement. Just like security through obscurity^1^^/^^2^ (when given as an isolated argument) is not making software more secure (dare I say it decreases its security; when used in isolation).
Sure do but unless Google gets really hurt (like 40% of their income) they'll take the slap on their wrist change it a bit and continue on.
Firefox makes most of it's income (to pay staff and whatnot) is coming straight from Google. Why? So (IMHO) Google can go up to curt and say "Well we aren't a monopole. Firefox is there and we even pay them".
Google could just stop paying them at any time, they've got that biggest slice of the browser cake after all.
Was as surprised as you but it does. Not from the official developer mind you but as a fork on Codeberg (still early pre-release aka Alpha).
What someone else suggested is to use Obtainium which can help manage Updates for apps directly from the authors repository (as long as it isn't officially on an F-Droid repo 🙂)
Aand they've blocked any new comments or issues on their Github...
So that's how it begins
That still however doesn't relieve them. Whether they've killed of less products, IMHO still leaves them at the position that they route MASSIVE amounts of the entire internet.
One point of failure or control is still a big risk, no matter how you turn it
Grayjay ftw