#AnySoftKeyboard, installed from #FDroid, asks for access to Contacts. Was it compromised? (EDIT: Unlikely)

I don’t remember it asking me for Contacts before (but @lnxw37a2 does). [EDIT: I was] worried it may have been subject to a supply chain attack, and to be on the safe side, I uninstalled it.

It seems to be a mostly unmaintained app that I never use, but hadn’t uninstalled. This is the first new version since 2025/07/25, and before that, 2022/01/14 (the first version shipped by @fdroid).

  • snek_boi@lemmy.mlEnglish
    5·
    29 days ago

    It sounds really concerning.

    So that your title is read easily, you may consider editing it. To me it appears truncated.

    Maybe something like

    AnySoftKeyboard, installed through FDroid, asked for access to my contacts. Could the app be compromised?

    or something like that could work?

    • Strypey@mastodon.nzoss.nzOP
      2·
      29 days ago

      @snek_boi
      > So that your title is read easily, you may consider editing it

      Thanks for pulling me up on that, done. Also noted Linux Walt’s clarification, based on the version on his device. Hopefully you can see my reply to him.

    • Strypey@mastodon.nzoss.nzOP
      2·
      29 days ago

      @snek_boi
      > [post title] appears truncated.

      I need to remember when posting from Mastodon that the first Y characters of my post are used by @LemmyDev communities as the post title : P Truth is, many people won’t even know they are also posting to the threadiverse.

      I get that this title automation is better than no title. But are post titles editable by community mods, so they can remove truncated text and clarify as needed? If not, that might be a good feature.