See this issue on their github repo: here

Basically from what I understand there’s loads of unauthenticated api calls, so someone can very easily exploit that.

If they just supported mTLS in their clients it wouldn’t be an issue but oh well :(

You’re right actually it’s not native I don’t know what I’m on about 😅 Still it’s much easier to have a baked in terminal app than having to install proot on top of termux, hopefully it will have less of a performance impact than proot as well.

Just installed arch with chroot on my old rooted phone a week ago.

Seeing this is great because it means there’s no need to complicated workarounds or even root access! Plus the distro runs natively and not with difficulties like with chroot :D

yep

In my opinion it’s the best solution because there’s a really low attack surface plus it makes it easy to control which device has access to which services.

Not any in particular but mTLS is essentially just a reverse proxy (like nginx) asking a client for a certificate to be able to access the service behind it.

There are quite a few guides out there, so choose one for your reverse proxy of choice!

mTLS with a reverse proxy!

How exactly does stuff get broken? Never rly had a problem bumping up the version in docker. The only issue has been the playstore version taking longer to push updates sometimes for the mobile apps.