tl;dr the app is close source
this post was submitted on 14 Sep 2023
9 points (90.9% liked)
Summit
708 readers
17 users here now
Community to discuss Summit, a Lemmy reader for Android.
App (Play Store): https://play.google.com/store/apps/details?id=com.idunnololz.summit
APK: https://github.com/idunnololz/summit-for-lemmy/releases
Patreon: https://patreon.com/SummitforLemmy
Ko-Fi: https://ko-fi.com/summitforlemmy
founded 1 year ago
MODERATORS
Oh, that's a shame but your reasoning does make sense. What (if any) guarantees are you able to make about how data (such as passwords) are handled?
I try not to handle any sensitive data if I can help it. I'm not a security expert so if I can delegate sensitive data to things better equipt to handle them I do.
Passwords are never saved to disk and only kept in memory. They are never logged and are only used for the login API. Any data I deem sensitive I store in internal storage which is storage that Android enforces cannot be accessed by any app except the one that created the data. (Technically if you root your device I think you can go around this but I don't think any app can make guarantees for rooted devices).
Thanks, that seems pretty reasonable. While I've got you here do you have a place for bug reports and feature requests (or are posts in this community fine)?
Yep that's partly what this community is for. You can either make a post for feature requests or bug reports or just comment on any of the release/wip posts.