Hacker News Reader

Apparently they're rather shady.

https://infosec-handbook.eu/blog/e-foundation-first-look/

I don't think it's fair to categorize them as 'shady', at least yet. Most of the issues described could be attributed to the fact they are very early stage and just wanted to release something working quick. I realize that's not always the best approach, though. Time will tell if they are a standup organization or not, I suppose.

The very reason for /e/ to exist is expressly to provide users with privacy...so some of the shortcuts they took are inexcusable (using APKs from APKPure, leaking personal data, etc).

So "shady" might not be the right term..."untrustworthy" might be a better one, until they prove otherwise.

Pardon my lack of knowledge, but what is wrong with APKs from APKPure?

It's a third party.

To be sure of the integrity of a binary and what it does, one must build it from source code that one has verified.

Making strong claims about privacy and then bundling pre-built binaries found on the internet (no matter what the site) does not inspire confidence in me about the team or its supposed dedication to privacy.

.XYZ domains ARE shady.

Totally https://abc.xyz

Reply on news.ycombinator.com