Skip to main content

@dansup, false positive, Pixelfed https://pixelfed.social/users/dansup

@dansup fyi, and I don't consider it a problem for me, but the Pixelfed Android app installed from f-droid (1.0.0.37) triggers a warning by the Lookout scanner. It says the signing key is accessible to multiple developers. I guess this is just a result of releasing via f-droid. However, I'm not getting this message on any other apps I got from f-droid.

For the warning, see screenshot.

The authorship of this application cannot be determined because the app is signed using a private key that is publicly known or shared between multiple developers. This introduces significant security vulnerabilities. Extra scrutiny is advised as this app may exhibit unwanted or risky behavior.

@dansup @dansup
⇧