• 1 Post
  • 7 Comments
Joined 1 year ago
cake
Cake day: December 28th, 2023

help-circle
  • N0x0n@lemmy.mltoTechnology@lemmy.mlNewpipe
    link
    fedilink
    arrow-up
    2
    ·
    6 days ago

    From what I understand, F-droid regularly audits a few new apps for malicious code

    That’s a good point, but how can a malicious code be add to a source code from github? I mean if you only use trusted applications repos (most of them are already on f-droid anyway) there shouldn’t be any concern right?

    But reading from the link you posted there’s some chance of a MITM attack and send a malicious payload directly to Obtainium? (Correct me if I’m wrong).

    Github is not neccesarily the same source used to generate their binaries.

    Didn’t knew that :/

    Thanks for sharing your knowledge !




  • imo a monorepo is better for retrieving information than if you split it out. Forgejo search does not work across repos, and imo even if you used a provider that does, it is always more complex to have to look in many places vs 1. I would advise you try putting all your personal scripts in one place rather than spread them around. I only give my apps a seperate repo when i am ready to share them with others and i need that clear boundary for access.

    Thanks for the tip ! Yeah, there goes my idea to host forgejo to the drain. If I can’t search across repos that’s a big NO ! I thought to use repos like a book and separate everything according specific subjects :/. Humm, maybe I should give Git-server + mdBook a try like someone suggested below.

    I keep a note called _focus that i go to when i am overwhelmed. It contains my “seven W’s”, which are links to separate notes which are purposefully kept simple.

    Haha, that’s a nice way to refocus your mind on what’s important ! Thanks for sharing your personal way to refocus on what’s important ! 💖



  • Thank you for your insight !

    Hmm, I don’t have experience with hosting Forgejo, but my intuition tells me that because it has relatively many features, that its administration is more involved than if you only host a Git Server.

    Yeah that’s what I’m afraid of… The maintenance seems a bit complex and it seems to be solved with a hosted git server :) Seems promising I will give it a try !

    Thank you !!