← Back to team overview

ubuntu-phone team mailing list archive

Re: How do I know an app is safe to install?

 

On Tue, Oct 15, 2013 at 9:16 AM, Michael Zanetti <michael.zanetti@xxxxxxxxxxxxx> wrote:
App Developers don't want to publish their code and the vast majority of users doesn't seem to care about anything security at all anyways. It's a sad situation for people like us who actually DO care about security.

However, I haven't given up hope that at some point someone will set up some App Repository for Ubuntu Touch which requires developers to upload a source package, the binary will be built on the trusted server and the exact same source archive published along with the binary.


Personally, I'd much prefer to publish through this system. Not only would it provide more assurance for my users that my source actually is my source, it would free me from having to play with pbuilder and chroots to build click packages. I doubt that I'm typical in this regard, but one datum is better than none, right?

Robert



Follow ups

References