Does an open source game from Frozenbubble or Super Tux have any types pf vulnerabilities to worry about like a web browser might or is it safe to just download it, with no worries. As long it's downloaded from safe repositories?
this post was submitted on 28 Oct 2024
0 points (50.0% liked)
F-Droid
8078 readers
2 users here now
F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.
Matrix space | forum | IRC
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Frozen bubble is a joy, and I really don't see how it's a big vulnerability. Just don't give it internet perms (which it shouldn't need). I guess in theory it makes the device less secure, but in a world where they purposefully leave vulnerabilities in the chips for the cell connection itself, nobody with the resources to do so is going to bother engineering a chain attack utilizing a 20 year old FOSS game installed by .00005% of users.
Ok. But if they were to do so what could they potentially do and how would they.
Hard to say with an unknown unknown. There's no way to know what exact vulnerabilities exist or how they could be chained with other exploits. Think of it like not having your brakes promptly serviced. It's probably fine, but it's also possible 5% worse breaking leads to a 30 car pileup that causes a fertilizer factory to explode. In all likelihood nothing would happen, worst case, Frozen Bubble introduces an old library, opening you up to a chain of attacks where the attacker totally owns your device, plays the long game, using it to own your home and work networks, and steals your life savings, has you fired, and sends your nudes to all your grammar school teachers. Or something in between.
Not op but check the permissions of the app and if you're not comfortable with them don't use it. As they said you should be fine