this post was submitted on 30 Jun 2023
20 points (100.0% liked)

Chat

7512 readers
1 users here now

Relaxed section for discussion and debate that doesn't fit anywhere else. Whether it's advice, how your week is going, a link that's at the back of your mind, or something like that, it can likely go here.


Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

I might just be paranoid but is wefwef.app safe? Any of you guys use it?

I'm primarly curious how much of wefwef is proxied versus directly pulled from instance.

top 12 comments
sorted by: hot top controversial new old
[–] z3n0x@feddit.de 16 points 2 years ago (1 children)

Open source, so anyone can look through the code, or self host it even.

[–] lauha@lemmy.one 3 points 2 years ago (2 children)

When you install wefwef on your phone, aren't you essentially hosting it since it is a standalone application running on your phone?

[–] z3n0x@feddit.de 3 points 2 years ago

As far as I understand even with the web app installed currently everything has to be proxied because CORS but that will hopefully change in the future. Reference: https://github.com/aeharding/wefwef/releases

[–] rfel 1 points 2 years ago

When you install the wefwef app on your phone, it functions as a standalone application that runs on your device. However, it still relies on the wefwef.app for updates and maintenance. The developer who created the app manages this server to ensure that the app remains up to date and properly maintained.

Personally, I trust the author and use the wefwef.app instead of self-hosting it myself.

[–] sparky@lemmy.federate.cc 10 points 2 years ago (2 children)

It‘s a progressive web app, which is a little different than a website; it’s built in HTML/JS like a website, but has no server. You can install it on your device and it talks directly to your Lemmy instance. In effect it’s no different from any other Lemmy app except for being built in web programming languages instead of Swift/Kotlin (app programming languages).

[–] Lionir 7 points 2 years ago

This is actually not true. Because of CORS issues (which block you from querying a domain's resources while on another domain name on a browser), it proxies all of the requests using a backend server.

[–] Deemo@lemmy.fmhy.ml 3 points 2 years ago (1 children)

It is partially proxying due to cors

Although I suppose the source code does give a bit of assurance 😊

[–] Laxaria 2 points 2 years ago* (last edited 2 years ago)

You can do more by making sure you aren't reusing credentials.

Make it so at worse you lose an account and nothing more in a worst case scenario. I personally trust them

[–] Lionir 6 points 2 years ago* (last edited 2 years ago)

I trust wefwef.app - the developers have been working hard and advocating for permissive CORS to avoid to proxy all of the client's requests.

[–] Fizz@lemmy.nz 3 points 2 years ago (1 children)

Yeah I'm using it right now. I trust it based on nothing but the vibe.

[–] Deemo@lemmy.fmhy.ml 1 points 2 years ago
[–] moonw0man 1 points 2 years ago

I definitely was a bit concerned so I deployed my own instance, but not everyone can do that of course.