this post was submitted on 19 Aug 2024
999 points (95.9% liked)
Funny: Home of the Haha
5751 readers
599 users here now
Welcome to /c/funny, a place for all your humorous and amusing content.
Looking for mods! Send an application to Stamets!
Our Rules:
-
Keep it civil. We're all people here. Be respectful to one another.
-
No sexism, racism, homophobia, transphobia or any other flavor of bigotry. I should not need to explain this one.
-
Try not to repost anything posted within the past month. Beyond that, go for it. Not everyone is on every site all the time.
Other Communities:
-
/c/TenForward@lemmy.world - Star Trek chat, memes and shitposts
-
/c/Memes@lemmy.world - General memes
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Do you trust all of the apps in those 3rd party repositories? You shouldn’t.
i trust them infinitely more than evil google...
how so?
More than some google bs. They're open source, you could theoretically look at all the executed commands if you're not trusting it enough. Sure it could be another binary, but I think most people doing something FOSS (meaning freetime invested not for profit, out of hobby/interest/inspiration) are reasonable enough to not do stupid stuff like that. The way big corps are trying to overtake FOSS projects is the danger. Microsoft bought GitHub to get access to all of the community built software, we should diversify, I'm agreeing. Only a few big companies have taken the internet hostage, we need to free it again. As a community, normally the internet should be a place of plurality, not a few big sites that are the main hubs for everything. That's what it was intended for
Being open source doesn’t impart any modicum of security to an app. It does introduce the ability for someone to push malicious code to it and have it accepted by a maintainer. There’s not enough oversight and free labor available to review the code for every open source project throughly.
So, while you may not trust Google with your data, you should similarly not trust FOSS just because it’s open source and not Google.