←back to thread

Grayjay Desktop App

(grayjay.app)
510 points pierrelf | 2 comments | 20 Dec 24 17:33 UTC | HN request time: 0.399s | source
Show context
josephcsible ◴[20 Dec 24 21:56 UTC] No.42475448[source]▶
Please remove "Also available on FDroid" from the page. This app is not available on F-Droid and isn't allowed to be added to it since it isn't open source.
replies(5): >>42475504 #>>42475580 #>>42475614 #>>42476839 #>>42478042 #
1. moeffju ◴[21 Dec 24 07:23 UTC] No.42478042[source]▶
Maybe F-Droid should just call their official blessed repo "F-Repo" to end the confusion, because this is clearly available through F-Droid, just not in the F-Droid official repo...
replies(1): >>42478113 #
2. lrvick ◴[21 Dec 24 07:46 UTC] No.42478113[source]▶
Being able to side-load a random unsigned binary via the fdroid app, or getting it from the F-Droid repository where they do independently signed (and ideally reproducible) builds, are very different things.

The F-droid team does not have a high bar to be dicks. They do it to ensure their users get binaries that match the published code to prevent increasingly supply chain attacks.

The standards are there for good reason, and if you do not understand those reasons, then use a license that allows the people that do understand to distribute your software for you.

Very very few software engineers understand supply chain attacks or how to prevent them.