• limerod@reddthat.comM
    link
    fedilink
    English
    arrow-up
    17
    ·
    8 hours ago

    Fortunately, its an app for TVs. Still, sometimes you have to be extra careful when downloading 3rd party apps. Especially, those which do not exist on fdroid.

    • Stitch0815@feddit.org
      link
      fedilink
      English
      arrow-up
      7
      ·
      8 hours ago

      It would not matter in this case, or? The official SDK was compromised since his building machine was compromised?

      • limerod@reddthat.comM
        link
        fedilink
        English
        arrow-up
        4
        ·
        7 hours ago

        The app is limited for TV which limits the reach. Plus, I do not download apps outside of fdroid for the most part.

        • Scipitie@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          4
          ·
          4 hours ago

          It’s the Google account people log onto with thats the issue from a security perspective.

          That said neither a malicious update was so far identified nor anything that 2FA wouldn’t take care of.

          This can happen to fdroid apps as well by the way. It’s just the downside of small or solo devs that they are on their own when it happens.

          I’m actually more confident in the smarttube rev now I have to say. He disclosed it fast, flagged his own apps as compromised even without specific proof and published it from what I can tell pretty much right after finding out.