Free and Open Source Software

22064 readers

304 users here now

If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 3 years ago

MODERATORS

Gaywallet@beehaw.org

alyaza@beehaw.org

PSA syncthing-fork has changed owners (lemmy.today)

submitted 4 months ago* (last edited 4 months ago) by AmbiguousProps@lemmy.today to c/foss@beehaw.org

4 comments fedilink hide all child comments

cross-posted from: https://lemmy.world/post/38929150

Overview here

https://forum.syncthing.net/t/does-anyone-know-why-syncthing-fork-is-no-longer-available-on-github/25661/39

The new owner of the repo has a fresh github account and apparently has the signing keys from Catfriend1 too.

Time will tell if they are trustworthy, but for the extra paranoid it might make sense to pause updates for a while.

The new repo has two releases in it now. GitHub is silently redirecting to the new repo, even in Obtainium, meaning it's possible that if you had this previously installed via Obtainium and updated now, you may have apks installed that may or may not contain the changes in the repo.

This is a mess. I deleted the repo from Obtainium (luckily I don't auto install updates) and will wait to see what happens over the next few months. Might just save my notes in a network share instead of using syncthing from my phone. Idk, notes are all that I was using it for.

you are viewing a single comment's thread
view the rest of the comments

[–] jherazob@beehaw.org 7 points 4 months ago* (last edited 3 months ago) (1 children)

Ah fuck!

Edit: After reading more info on the situation it seems like there was no malice, but this has been handled in an outright lousy way, this software has important privileges on the phone and was handled spectacularly bad for an app aimed at people who care about privacy.

However, there was a silver lining here for some of us which was pointed there: The upgrade to version 2 was a potentially breaking one, so they published it in a way that would not upgrade automatically, so lots of people including me still have version 1.30.0.4, and are unable to automatically upgrade, need to do multiple manual steps to get to version 2. I think I'll wait a bit before upgrading to see how they handle things, OR if there's a fork by a person with a modicum of common sense.

[–] Dymonika@lemmy.ml 2 points 3 months ago* (last edited 3 months ago) (1 children)

FYI, I've been on 2.0 since a few weeks after it released and I literally noticed no difference at all. If no one told me about the update, I would have had no idea that it had applied; everything has been running identically to how it was before. I think it's safe to take up.

[–] jherazob@beehaw.org 1 points 3 months ago (1 children)

Nice to know! Thanks!

It's been a month, i wonder if we have established the trustworthiness of the new maintained or not

[–] Dymonika@lemmy.ml 2 points 3 months ago

That is a bit of a different case; Syncthing-Fork 2.0 was still under Catfriend1. From what I remember reading of Reddit banter, the pass-on was legitimate but just awkwardly done, to sum it up.