You are viewing a single comment's thread from:

RE: DApps, It's Time To Get Your Keychain On

in #keychain6 years ago

Like anything, a solid app needs to balance security with convenience.

Ultimately, the user needs to determine their threshold for what they find acceptable. You look at the developer, you look at the product, and you make a judgement call.

Sometimes it’s matter of what’s the lesser of two evils.

It’s like buying a car based on safety features. If you really want to avoid getting in an accident, you’ll never leave your house. But that’s not reasonable, so you utilize a solution that makes the most sense for YOU.

Here’s what I can say: your credentials are stored locally. We don’t store your info in the cloud or anything like that.

I’m assuming that any rumors of unsafe extensions are related to shady developers with malicious intentions. I’d be curious what you’ve heard.

Posted using Partiko iOS

Sort:  

I think the biggest issue that article had with extensions was that auto-updates require the user to trust the developer.

Unfortunately, that’s true with any application for any device or platform, right?

It’s not an exclusive issue only for extensions. Any developer can secretly code any app to do anything they want. That’s the risk you take for using someone’s product or service.

Not sure there’s a way around that.

Right now, I’m trusting Partiko as I type this comment. I’m also trusting Steemit Inc and the Witnesses. There could be all sorts of crazy code somewhere, and I wouldn’t know it.

In blockchain, you hear the term “trustless” a lot. I think the word should be used sparingly for very select situations. Most of the time, trustless is neither possible or practical.

Posted using Partiko iOS