• Stitch0815@feddit.org
    link
    fedilink
    English
    arrow-up
    7
    ·
    8 hours ago

    It would not matter in this case, or? The official SDK was compromised since his building machine was compromised?

    • limerod@reddthat.comM
      link
      fedilink
      English
      arrow-up
      4
      ·
      7 hours ago

      The app is limited for TV which limits the reach. Plus, I do not download apps outside of fdroid for the most part.

      • Scipitie@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        4
        ·
        4 hours ago

        It’s the Google account people log onto with thats the issue from a security perspective.

        That said neither a malicious update was so far identified nor anything that 2FA wouldn’t take care of.

        This can happen to fdroid apps as well by the way. It’s just the downside of small or solo devs that they are on their own when it happens.

        I’m actually more confident in the smarttube rev now I have to say. He disclosed it fast, flagged his own apps as compromised even without specific proof and published it from what I can tell pretty much right after finding out.