<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta content="text/html;charset=UTF-8" http-equiv="Content-Type"></head><body ><div style='font-size:10pt;font-family:Verdana,Arial,Helvetica,sans-serif;'>Hi Sandro<br>I get what you're saying, and entirely agree with the principle.<br>But unfortunately the practicalities disagree; compare Android and iphones - Apple has a closed ecosystem and a fraction of the malware that Android has (anything from 3%-20% depending on the report). The primary difference between the platforms is the fact that anyone can install whatever on Android but there's more stringent curation on an Apple. In many cases those files you can access on Android contain Bad Things.<br><br>Raising user awareness only works to an extent. If users aren't following basic security awareness already, I'm not sure an OSGEO\QGIS campaign would achieve much.<br><br>(Disclaimer - I own neither type of device; no oars in that race).<br>Cheers,<br>Jonathan<br><br><div class="zmail_extra"><div id="1"><br>---- On Wed, 20 Apr 2016 17:05:37 +0100 <b>Sandro Santilli<strk@keybit.net></b> wrote ---- <br></div><blockquote style="border-left: 1px solid #0000FF; padding-left: 6px; margin:0 0 0 5px">On Wed, Apr 20, 2016 at 04:23:58PM +0100, Jonathan Moules wrote: <br> <br>> That said, I don't know what the solution is, but I do know that <br>> relying on user awareness is a recipe for the botnet filled internet we <br>> have today. <br> <br>I'm not talking about "relying on" but about "raising" the user <br>awareness. Hiding the problem of having put trust in the sole hands <br>of the OS provider doesn't help with that. <br> <br>I see how this trust chain harms availability of software in the <br>smartphone world. Most services only ship their code via the "official <br>store". No easy way to get a direct link to an .apk package directly <br>from the authors. Most software _writers_ solely rely on the device <br>store, forcing users to _register_ (and give their personal data) to <br>the store owner, and even accepting to _pay_ for that disservice. <br> <br>The only advantage here goes to the "land" lords, whereas the "land" <br>is the hardware we think to _buy_, as user, but in fact are just <br>_renting_. <br> <br>REMINDER: I'm not against buying those certificates, but I would <br> consider it an investiment in an information campaign. <br> <br>--strk; <br></blockquote><br></div><br></div></body></html>