• Scipitie@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    4
    ·
    4 hours ago

    It’s the Google account people log onto with thats the issue from a security perspective.

    That said neither a malicious update was so far identified nor anything that 2FA wouldn’t take care of.

    This can happen to fdroid apps as well by the way. It’s just the downside of small or solo devs that they are on their own when it happens.

    I’m actually more confident in the smarttube rev now I have to say. He disclosed it fast, flagged his own apps as compromised even without specific proof and published it from what I can tell pretty much right after finding out.