new replicant blog post about FDroid

[Samir Faci (Dev)]

Well, I don't think there's any way of really ensuring that an app
doesn't do something malicious.  Though the application
is open source, so in theory you can run some basic heuristic/sanity
checks to ensure that its not calling home or such.

That should be somewhat doable at least if you limit it to java code.
Though I would think user feedback in general would
provide a good indication of how good or bad an application is.

You also have pr-established precedence.  Applications are released
from a particular author / company.. eventually the author/
publisher earns a bad reputation... just like on your standard
computer there's application you trust from names your recognize,
while a nifty 3rd party app, you might have a closer look at.


just my 2 cents.
--
Samir

On Tue, Dec 14, 2010 at 12:38 PM, silvio pelvico
<urodelomutante at yahoo.com> wrote:
> Hello everybody.
>
> Nice idea the one of the repo. I'm interested in the procedure for adding the apps too, I was going to ask about it when I've red the answer. Anyway I have some more questions. First, about nasty apps doing something hidden, what I know is that when you install an app, usually you can see which kind of permission it requires, but if it just asks to use network, how can I know if it will do anything dirty? :-P Or is it there a permission blacklist to look at?
>
> Second question is: I own a Freerunner with android cupcacke (for the moment), then the apps I have are tested just on android on freerunner 1.5: following the previous rules, are als apps for that version elegible to be included in the repo?
>
> Thank you
> urodelo
>
>
> --- On Tue, 12/14/10, Ciaran Gultnieks <ciaran at ciarang.com> wrote:
>
>> From: Ciaran Gultnieks <ciaran at ciarang.com>
>> Subject: Re: new replicant blog post about FDroid
>> To: "Samir Faci (Dev)" <dev at esamir.com>
>> Cc: replicant at lists.osuosl.org
>> Date: Tuesday, December 14, 2010, 9:28 PM
>> On 13/12/10 14:51, Samir Faci (Dev)
>> wrote:
>> > Just out of curiosity...   what's the
>> process to add an application to
>> > the FDroid market?
>> >
>>
>> You can submit suggestions here:
>>
>>  http://f-droid.org/repository/submit/
>>
>> Worth checking if it's already in there first though, since
>> most
>> submissions are:
>>
>>  http://f-droid.org/repository/browse
>>
>> Note the criteria for inclusion - obviously it must be
>> FOSS, but also
>> "Software that reports user activity without permission
>> (e.g. via Google
>> Analytics) or tracks user behaviour (e.g. most advertising
>> platforms) is
>> specifically excluded from FDroid’s own repository, as is
>> software with
>> the primary purpose of interacting with a non-Free network
>> service. "
>>
>> As and when Replicant has it's own repository, the criteria
>> may be
>> different from these.
>>
>> Regards,
>>
>> Ciaran
>> _______________________________________________
>> Replicant mailing list
>> Replicant at lists.osuosl.org
>> http://lists.osuosl.org/mailman/listinfo/replicant
>>
>
>
>
>



-- 
--
Samir Faci
*insert title*
fortune | cowsay -f /usr/share/cows/tux.cow