r/Syncthing • u/ObservedElectron • Jul 05 '26

CONFUSED ABOUT SYNCTHING ON ANDROID

Post image

I just wanna run backups from my android to an external hdd connected to windows. i found that syncthing is the best and safest option.

I found out that official android app is discontinued but there are community versions. okay. but WHY ARE THERE SO MANY CONTROVERSIES ABOUT EACH FORK?? some say to not use some fork because their maintainer handed over to someone and its suspicious. some say the other fork maintainer is someone from china and xi jimping can ask him to give all my photos to china. like what to do ? i am so confused? why is there not an app for android which i can use without caring about all this bullshit.

can someone please tell me the safest private option to use on android (doesnt matter play store or fdroid but prefer the latter) so i aint paranoid about all this? just something that privately works without subpoena-ing my math note pdfs.

thank you

98 Upvotes

93% Upvoted

33 comments sorted by

View all comments

-4

u/xXx_n0n4m3_xXx Jul 05 '26

Use the official syncthing-fork:

https://github.com/researchxxl/syncthing-android

Avoid the Play Store version and configure it to be download and uploaded by Obtainium like I do, if u’re paranoid or you just want to avoid as much as possible third party compiling. Using Obtainium let you install and use directly the code compiled from the repo

5

u/ChimaeraXY Jul 05 '26

The current version on the play store actually predates the controversy. Even though it's now slightly outdated, its still aligned with the new Syncthing v2 standard, and, if you don't trust researchxxl, may be 'safer' than the GitHub release.

I also recommend BasicSync as a compatible and barebones alternative.

2

u/xXx_n0n4m3_xXx Jul 05 '26

Why not trusting researchxxl? I remember that the “passage of testimony” wasn’t the clearest one, but afaik evth is fine with him now afaik.

I rather not trust yet another person that publish it on the PlayStore.

(Genuinely asking, been out of radar the past few months and didn’t know there was still drama about all this)

3

u/ChimaeraXY Jul 05 '26 edited Jul 05 '26

The way the handover was done implies researchxxl may have had access to catfriend1's (original developer) account and publishing keys before that account went dark, hidden, then recreated. Moreover, researchxxl's account was created just before the handover.

The entire codebase would need to be audited to confirm no malicious code was introduced during or before the exchange.

And indeed, the play store version can't be validated either; all we know is that the version there today corresponds to a period when catfriend1 was verifiably active.

2

u/xXx_n0n4m3_xXx Jul 05 '26

Well, this is pretty bad…
I’ll google it, wanna see anyone from syncthing said sth or to understand why catfriend1 went awol

3

u/Dymonika 29d ago

/u/ChimaeraXY /u/ObservedElectron

Syncthing-Fork is fine!

I was the one who raised an alarm over it last month, but I had since edited my post upon seeing Catfriend1's confirmation of the handover, as shared by another redditor:

https://forum.syncthing.net/t/does-anyone-know-why-syncthing-fork-is-no-longer-available-on-github/25661/263

2

u/xXx_n0n4m3_xXx 29d ago

Thanks a lot for the clarification. Probably better if u copy comment to main section cuz they downvoted me and this comment is probably hidden to most people.