this post was submitted on 22 Apr 2024
465 points (97.4% liked)

Open Source

29776 readers
226 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] refalo@programming.dev 1 points 4 months ago (1 children)

and you can control that

Sorry, I meant "assuming one has complete control over the client source" where the remote cannot just change it on you.

[–] Allero 2 points 4 months ago* (last edited 4 months ago) (1 children)

I mean they can make a sneaky update to the client that introduces such changes.

Sure, if you won't update your client, this won't affect you, but would potentially open you up to other security vulnerabilities.

[–] refalo@programming.dev 2 points 4 months ago* (last edited 4 months ago)

This was a real concern with MEGA back in the day (after Kim said you should no longer trust them) and a big reason why I prefer to use standalone client apps that I can control the source of.