I am requesting the removal of the Citron Emulator from the CachyOS repository (added in #79) due to significant security and privacy concerns raised by the emulation community. According to detailed reports on Reddit (The Fall of Citron and The Fall of Citron: Part 2), the Citron Emulator has implemented a verification system requiring users to submit sensitive Nintendo Switch DRM files and serial numbers to an external application for Discord access. This system, developed by @LotP1, stores user data in a backend database, raising risks of potential misuse, including blacklisting or hardware bans if the data is compromised. Additionally, the lead developer, Zephyron/Phoenix, has a history of controversial behavior, including allegations of running a piracy website and undermining contributors, which erodes trust in the project's integrity.
For the safety of CachyOS users, I strongly recommend removing Citron Emulator from the repository until these security concerns are resolved.
Alternative emulators like Sudachi or Kenji-NX may be considered as safer options.
Sources:
https://www.reddit.com/r/EmulationOnAndroid/comments/1jnpo71/the_fall_of_citron/
https://www.reddit.com/r/EmulationOnAndroid/comments/1jojbkw/the_fall_of_citron_part_2/
I am requesting the removal of the Citron Emulator from the CachyOS repository (added in #79) due to significant security and privacy concerns raised by the emulation community. According to detailed reports on Reddit (The Fall of Citron and The Fall of Citron: Part 2), the Citron Emulator has implemented a verification system requiring users to submit sensitive Nintendo Switch DRM files and serial numbers to an external application for Discord access. This system, developed by @LotP1, stores user data in a backend database, raising risks of potential misuse, including blacklisting or hardware bans if the data is compromised. Additionally, the lead developer, Zephyron/Phoenix, has a history of controversial behavior, including allegations of running a piracy website and undermining contributors, which erodes trust in the project's integrity.
For the safety of CachyOS users, I strongly recommend removing Citron Emulator from the repository until these security concerns are resolved.
Alternative emulators like Sudachi or Kenji-NX may be considered as safer options.
Sources:
https://www.reddit.com/r/EmulationOnAndroid/comments/1jnpo71/the_fall_of_citron/
https://www.reddit.com/r/EmulationOnAndroid/comments/1jojbkw/the_fall_of_citron_part_2/