Still seeing posts from Lemmy about how @fdroidorg doesn't have in sync.

3 years ago by Draken BlackKnight to c/newpipe

Still seeing posts from Lemmy about how @fdroidorg doesn't have @newpipe in sync.

They have an official repo. That will fix the problem.

testman 2 points 3 years ago

NeoStore comes with NewPipe repo enabled by default.
https://github.com/NeoApplications/Neo-Store

save

path: 0 6684164, hotness: undefined, score: 2, children: 0

NeatNit 1 point 3 years ago

They have an official repo. That will fix the problem.

Correct me if this is wrong, but from my understanding switching to their repo means no longer being behind F-Droid's source code match guarantee, or seeing anti-features and all that stuff. Granted, I already gave that up for Bitwarden so I admit it's a bit hypocritical, but much of the value of a centralized F-Droid is the main repo's curation process - circumventing it is a workaround, not a solution.

Edit: I also worry about the possibility - however remote - of downloading new apps thinking they're from the F-Droid repository, when they are in fact from some alternate repository I'm using. I already worry about this with Bitwarden, and each repo I add is another potential vector for this. Perhaps I'm overthinking this, but I'm thinking if too many popular apps make their own F-Droid repos, this might become a real threat.

save

path: 0 7192263, hotness: undefined, score: 1, children: 6

drakenblackknight 0 points 3 years ago

@NeatNit
The other problem is trusting a centralized service implicitly. That's how people keep getting their login information exposed from Fakebook.

save

path: 0 7192263 7192397, hotness: undefined, score: 0, children: 5

NeatNit 1 point 3 years ago

gotta trust someone at some point

save

path: 0 7192263 7192397 7192398, hotness: undefined, score: 1, children: 4

drakenblackknight 0 points 3 years ago

@NeatNit
Yeah, why not make it the people it comes from?

save

path: 0 7192263 7192397 7192398 7193258, hotness: undefined, score: 0, children: 3

NeatNit 1 point 3 years ago

In the general case: because placing all your trust in one place leaves no one else to check their work. You have to place some trust in the app developer (this is always true) but having a middleman can have benefits. For example, if an app starts using proprietary blobs - either deliberately or without realising - then F-Droid's pipeline and/or maintainers would likely catch it and have it resolved. If there's no one else to check such nitty-gritty details, that leaves more room for error.

In the specific case of Newpipe: it's probably fine, but I'd prefer not to make a habit of it.

save

path: 0 7192263 7192397 7192398 7193258 7193259, hotness: undefined, score: 1, children: 2

nikos 1 point 3 years ago

@drakenblackknight @fdroidorg @newpipe

Even the official repository seems to update a day or so late. Most of the time the in-app updater notifies me about a new version, then I go check fdroid and the update is not yet available there.

save

path: 0 6685772, hotness: undefined, score: 1, children: 0