zlacker

[parent] [thread] 0 comments
1. j-bos+(OP)[view] [source] 2025-12-08 02:43:15
> People are worried about a backdoor hijack attack similar to the XZ libary.

This is a particular concern because the syncthing-fork is coded to require full storage access, iirc for compatibility with certain phones. Idr, went through with Claude and iterrated through a diff of everything that between Catfriend1's changes and the original repo. The broad access really isn't necessary on most phones as I refactored the flag, compiled the app and installed it with no problems. I ultimately decided to go with the official build to make updates easy, now hmmm. Troubling when the trust gets so dilluted.

[go to top]