So I’ve been using Rustdesk with a self hosted server for business and personal use now for some time. However, it is definitely the sketchiest foss software I’ve used. It seems to be based in China but the developers keep lying and saying its in Singapore.
Here is a list if everything I’ve found:
https://www.reddit.com/r/selfhosted/comments/14kjvkg/community_consensus_on_rustdesk_with_all_the/
https://github.com/rustdesk/rustdesk/discussions/1159
https://www.reddit.com/r/rustdesk/comments/y230hf/my_rustdesk_client_try_to_communication_with/
https://www.reddit.com/r/selfhosted/comments/10ppntj/reminder_about_the_shadyness_of_rustdesk/
https://www.reddit.com/r/selfhosted/comments/uurta8/_/
It seems that now the clients and OSS server are completely foss which is good. They also no longer have public servers in China according to them. In the client itself it also now has better defaults so you are less at risk of getting attacked.
It still is sketch but it now is slightly less sketch I guess? Either way its not ideal.
It does not matter to me if it is still there or not. The point that this was in a release makes me question their code and release practices.
They apologized and admitted that it was a dumb thing to do.
I very much agree. I think it would be best to at least get some third party to verify releases. Maybe if it gets on Flathub that will happen.
Well, vote with your choices, I suppose.
I’ve seen enough poor practices go unacknowledged and buried, or simply forgotten (lemmy user count +1 is kindof a minor but hilarious ‘fix’ for divide-by-zero), that I just like or when an organization acknowledges it and makes a change. I don’t need rustdesk, but I wouldn’t mind using them.