Found this notification this morning on my pixel 6.
this post was submitted on 11 Mar 2025
950 points (95.6% liked)
Technology
66067 readers
4930 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Never heard of that, what's the benefit over F-Droid?
The main difference is of philosophy of trust. With F-droid you trust F-droid to build the binary from the developers' source code. With Accrescent, you trust the developers to build the binary from the source code.
So Accrescent is more like the classic play store or Obtainium?
In the play store you're trusting Google and the developer.
I'm not sure how obtainium works. But if you download binaries from GitHub, you're trusting the developer to accurately build their source code into the binary without adding anything. You're also trusting GitHub implicitly -- way back when, source forge was sometimes adding malware to downloads iirc.
F-droid is kind of cool in that they are saying, "we will ensure for you that the code you execute is the same as the open source code you can read". But this added level of insurance comes with downsides -- like sometimes it's harder for the developer to make their code build properly, or maybe updates take longer.
And here I'm trusting Accrescent to actually deliver me an executable that has not been tampered with
Yes you are trusting them, and the developer. Just like you are trusting F-droid if you download from them. You also have to trust that the compiler program doesn't do anything fishy. It's trust all the way down.
The good news is that lots of people are working on making the systems trustworthy, and you as a consumer can learn to distinguish between what can be trusted for your usecase and what can't.
Not when using a self-hosted F-Droid Repo - which is the case for Ironfox.
Yeah that's like any 3rd party repository