this post was submitted on 14 Sep 2023
9 points (90.9% liked)

Summit

740 readers
5 users here now

Community to discuss Summit, a Lemmy reader for Android.

App (Play Store): https://play.google.com/store/apps/details?id=com.idunnololz.summit

APK: https://github.com/idunnololz/summit-for-lemmy/releases

Patreon: https://patreon.com/SummitforLemmy

Ko-Fi: https://ko-fi.com/summitforlemmy

Website: https://summit.idunnololz.com/

founded 1 year ago
MODERATORS
 

I'm really enjoying Summit, I've tried every Lemmy client I could find and I think this is the best one I've used. I can't find the source code though, https://github.com/idunnololz/summit-for-lemmy seems to only list releases, is this a bug?

top 5 comments
sorted by: hot top controversial new old
[–] idunnololz@lemmy.world 5 points 1 year ago (1 children)
[–] bug@lemmy.one 3 points 1 year ago (1 children)

Oh, that's a shame but your reasoning does make sense. What (if any) guarantees are you able to make about how data (such as passwords) are handled?

[–] idunnololz@lemmy.world 3 points 1 year ago (1 children)

I try not to handle any sensitive data if I can help it. I'm not a security expert so if I can delegate sensitive data to things better equipt to handle them I do.

Passwords are never saved to disk and only kept in memory. They are never logged and are only used for the login API. Any data I deem sensitive I store in internal storage which is storage that Android enforces cannot be accessed by any app except the one that created the data. (Technically if you root your device I think you can go around this but I don't think any app can make guarantees for rooted devices).

[–] bug@lemmy.one 2 points 1 year ago* (last edited 1 year ago) (1 children)

Thanks, that seems pretty reasonable. While I've got you here do you have a place for bug reports and feature requests (or are posts in this community fine)?

[–] idunnololz@lemmy.world 3 points 1 year ago

Yep that's partly what this community is for. You can either make a post for feature requests or bug reports or just comment on any of the release/wip posts.