Discussion
Loading...

Post

Log in
  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Doerk
Doerk
@NebulaTide@mastodon.bsd.cafe  ·  activity timestamp 3 weeks ago

What's going on with Syncthing for Android?
It seems like the project suddenly disappeared and the maintainer has set his profile on github to privat.

However, it seems like another github account has taken over the project. There has been no communication why the project has been handed over. This is worrying, since the new account has access to the signing keys of the app and at least theoretically it could be possible to add malicious code to this widely used app.

I would like to keep thinking that Syncthing is still trustworthy, but to be honest, as long as we don't know what's going on, I'm not sure.

https://www.heise.de/en/news/Key-handover-in-the-dark-Syncthing-fork-community-raises-alarm-11107337.html

#syncthing #takeover #opensource

  • Copy link
  • Flag this post
  • Block

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.1-alpha.44 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Members
  • Code of Conduct