like this
Marcelo and Ramin Honary like this.
reshared this
Joel Tak., Lamaaah, Djeannot, Erik Jonker, Eldritch kcarruthers, devopscats, Trendy Toots, Erik Uden 🚩, martin lentink 🇪🇺 🇺🇦📎, igor, D☆☆n, Marcelo, JWcph, Radicalized By Decency, Thom, a distro-agnostic tool, Dendan Setia (Nins), ghostdancer, athmane mokraoui [BoF] ⏚ꝃñ⌁⁂, Kierunkowy74, sotolf, Óli Gneisti (English), clarkiestar, Incredibish, hex, Disreputable_Craftsman, Joe Lanman, CaveDave, Kotes, Ramin Honary, Alex / catileptic, Lisa Melton, Alex Barredo 📉, DiegoAraozZ, leeleedee, Sally Strange, Bellison22, Peter Brown, trends, Chu 朱, your auntifa liza 🇵🇷 🦛 🦦, stux⚡️, Mark Ingalls, Zonkerh, Santiago 🔭🪐, Lord Caramac the Clueless, KSC, Eric Lawton, Personne, Kevin Russell, aaron r., Femme Malheureuse and Debbie Goldsmith 🏳️⚧️🏳️🌈 reshared this.
<marquee>Reject modern web. Return to 1.0</marquee>
🚧 Under Construction 🚧
Marcelo likes this.
reshared this
James 🦉 #FBPE 🇪🇺, Jeff Samsonow, Marcelo and Zendadaist reshared this.
Sensitive content
[ W3C XTML 1.0 Transitional badge ]
[ W3C Valid CSS badge ]
Cat 🐈🥗 (D.Burch) reshared this.
<marquee> sucks as it is not in the official 1.0 standard. microsoft only used it within their engine like so many other times they tried to take control over the standard back then ...
p.s.: microsoft sucks as well ...
@Wintermute_BBS Oh that's right! <marquee> originated from early IE and <blink> came from Netscape. (Both accessibility nightmares too)
reshared this
Cat 🐈🥗 (D.Burch), Ruben Schade (taking break) and JWcph, Radicalized By Decency reshared this.
Como cancelar o Clube iFood? Confira passo a passo
https://www.techtudo.com.br/dicas-e-tutoriais/2025/01/como-cancelar-o-clube-ifood-edapps.ghtml?utm_source=flipboard&utm_medium=activitypub
Posted into Tecnologia @tecnologia-FlipboardBR
Saiba como cancelar o Clube iFood, assinatura que garante cupons de desconto na plataforma de delivery; procedimento é simples e pode ser feito rapidamente pelo celularTechtudo
Marcelo likes this.
reshared this
Tecnologia, Marcelo and Marcelo reshared this.
Selena Gomez respondió con ironía a un candidato al Senado de EU que pidió su deportación tras su emotivo mensaje de apoyo a los migrantesRedacción (EstadoRed)
Guterres nomeia brasileiro para liderar forças da ONU na RDCongo
www.rtp.pt/noticias/mundo/guterres-nomeia-brasileiro-para-liderar-forcas-da-onu-na-rdcongo_n1630573
O secretário-geral das Nações Unidas, António Guterres, anunciou a nomeação do tenente-general brasileiro Ulisses de Mesquita Gomes como novo comandante das forças da ONU na República Democrática do Congo (RDCongo).
France: une jeune fille originaire du Burkina Faso arrêtée dans son collège pour être expulsée
(RFI)
rfi.fr/fr/france/20250129-fran…
En France, une collégienne scolarisée en Moselle, département du Nord-Est, a été interpellée par les gendarmes dans son établissement la semaine dernière pour être expulsée du territoire.RFI
like this
wiase, Glowing Cat of the Nuclear Wastelands, Marcelo and Steven like this.
reshared this
Cainmark Does Not Comply 🚲, Lisa Melton, Ms. Que Banh, sport of sacred spherical cows, WearyBonnie, The Witch of Crow Briar, 😀🚲, Trendy Toots, Prof. Catherine Flick, your auntifa liza 🇵🇷 🦛 🦦, Paul 💙 28 💔 💚, RinostarGames, Toni Aittoniemi, CaveDave, Eric J. White, BadWoof, Solarbird, Gib ☃️🐒🌈🇺🇦, Ulrich Hoffmann🖖, Lazarou Monkey Terror 🚀💙🌈, Natasha, Alex@rtnVFRmedia Suffolk UK, Femme Malheureuse, Jayne 🇪🇺🏳️🌈, Dubious Blur, JonChevreau 🇨🇦, AndyCymro, Marcelo, Steve Paradis and Phanuel reshared this.
The US (or at least its gammons) will still whine about the WHO though.
Just like the #brexshitters still whine about the EU even though we no longer have a vote, due to them, and can't do anything to change whatever they're whining about.
Simon Flett reshared this.
nixCraft wrote:
A partir de 19 de janeiro de 2025, os formuladores de políticas internas do Facebook decidiram que o Linux é malware e rotularam grupos associados ao Linux como sendo "ameaças à segurança cibernética". Quaisquer postagens mencionando o DistroWatch e vários grupos associados ao Linux e discussões sobre Linux foram encerradas ou tiveram muitas de suas postagens removidas.
Starting on January 19, 2025 Facebook's internal policy makers decided that Linux is malware and labelled groups associated with Linux as being "cybersecurity threats". Any posts mentioning DistroWatch and multiple groups associated with Linux and Linux discussions have either been shut down or had many of their posts removed.distrowatch.com/weekly-mobile.…
DistroWatch.com: Put the fun back into computing. Use Linux, BSD.
News and feature lists of Linux and BSD distributions.distrowatch.com
Keit Lima escreveu:
É inacreditável que, mesmo depois das fortes chuvas da última sexta-feira, que deixaram a cidade debaixo d'água, o prefeito, que ficou desaparecido por horas, tenha tido a coragem de afirmar que fez um bom trabalho.
O que Nunes não tem coragem de dizer é que deixou de gastar mais de R$ 1,47 bilhão em verbas destinadas ao combate às enchentes na cidade. Com o avanço da crise climática, é urgente que a cidade mais rica do país esteja preparada para esse tipo de evento, que, infelizmente, será cada vez mais frequente.
No fim, a gente sabe quem são os primeiros a sofrer com as tragédias ambientais.
Eu copiei o texto e a imagem desta postagem no facebook.
reshared this
(random) rick.e and mai 🦇 reshared this.
Aqui está uma descrição de texto alternativo para a imagem:
A imagem é um meme que satiriza a resposta do governo de São Paulo a alagamentos. O meme apresenta duas imagens lado a lado. Do lado esquerdo, há uma imagem de um homem, possivelmente um político, vestido como um mágico, com balões de fala dizendo "Agora a água da chuva abaixou" e "Não precisa me agradecer". Do lado direito, há uma imagem de Sailor Moon, com um balão de fala dizendo "mas você não fez nada". No topo da imagem, há um texto que diz "Nunes diz que São Paulo 'respondeu rápido' aos alagamentos". O meme sugere que a resposta do governo foi ineficaz, e que a melhoria foi devido a causas naturais.
Fornecido por @altbot, gerado usando Gemini
Rachel Carson, author of "Silent Spring" published in 1962. The book documented the environmental harm caused by the indiscriminate use of DDT, a pesticide used by soldiers during World War II. Carson accused the chemical industry of spreading disinformation, and public officials of accepting the industry's marketing claims unquestioningly.
The book was met with fierce opposition by chemical companies, but it swayed public opinion and led to a reversal in US pesticide policy, a nationwide ban on DDT for agricultural uses, and an environmental movement that led to the creation of the US Environmental Protection Agency.
#Nature #Science #Environment #EPA #Industry #Disinformation #Books #Author
Marcelo likes this.
reshared this
Rhinos Worry Me, your auntifa liza 🇵🇷 🦛 🦦, Aurora 🐌, Electroduende21, aprilfollies, Marcelo and Rosa Luxemburgo reshared this.
@CorioPsicologia
Hay un documental sobre Rachel Carson en PBS muy interesante sobre su historia y su lucha contra el DDT
Me parece que no era este (cuando la vi no tenía subtítulos en español)
pbs.org/wgbh/americanexperienc…
Ver la película con subtítulos en español When Rachel Carson’s Silent Spring was published in 1962, the book became a phenomenon.americanexperience
Acá está el documental, sin subtítulos:
archive.org/details/american-e…
American Experience is a television program airing on the Public Broadcasting Service (PBS) in the United States. The program airs documentaries, many of which...Internet Archive
A eleição presidencial da Romênia foi cancelada por interferência da Internet! Acho que é o primeiro caso no mundo.
Precisamos ter cuidado no Brasil, víde o impulsionamento do video do deputado nikolas com inverdades que teve mais de 300 milhões de visualizações e derrubou a aprovação do governo federal com base em informações falsas:
dropsitenews.com/p/romania-cal…
How a mischievous social media campaign backfired and led to the first scratched vote in EU history.Drop Site News
Marcelo likes this.
reshared this
Ódio e Apatia and Marcelo reshared this.
Ativista de gênero mira debate mais amplo sobre equidade e masculinidades entre lusófonos
news.un.org/feed/view/pt/audio/2025/01/1844261
Apresentador de mídia de Moçambique, Gilberto Macuácua, defende ampliação de modelo que tem adotado com a ONU Mulheres; ação em realidades tradicionais e na mídia confronta notícias falsas e coloca homens na linha de frente contra a violência.
Apresentador de mídia de Moçambique, Gilberto Macuácua, defende ampliação de modelo que tem adotado com a ONU Mulheres; ação em realidades tradicionais e na mídia confronta notícias falsas e coloca homens na linha de frente contra a violência.ONU News
Exército do Mali neutraliza grupo separatista armado
www.prensalatina.com.br/2025/01/28/exercito-do-mali-neutraliza-grupo-separatista-armado
Bamako, 28 jan (Prensa Latina) O exército do Mali anunciou a neutralização de um grupo separatista armado na cidade de Echell, na região de Timbuktu, no centro do país africano, informou a mídia local hoje. The post Exército do Mali neutraliza grupo…
Pobreza e desemprego aumentam no Equador
www.prensalatina.com.br/2025/01/28/pobreza-e-desemprego-aumentam-no-equador
Quito, 28 jan (Prensa Latina) O desemprego aumentou no Equador, onde mais de cinco milhões de pessoas vivem atualmente na pobreza, de acordo com os dados mais recentes do Instituto Nacional de Estatística e Censos (INEC). The post Pobreza e desemprego…
Tradução (pelo tradutor do google) da postagem mais embaixo:
Antes que o Google decidisse deixar extremistas renomearem corpos d'água, ele usava o bom senso.De 2008: "...se um governante anunciasse que doravante o Oceano Pacífico receberia o nome de sua mãe, não adicionaríamos esse marcador de lugar a menos e até que o nome se tornasse de uso comum."
Before Google decided to let extremists rename bodies of water, it used common sense.From 2008: "...if a ruler announced that henceforth the Pacific Ocean would be named after her mother, we would not add that placemark unless and until the name came into common usage."
publicpolicy.googleblog.com/20…
How Google determines the names for bodies of water in Google Earth
Posted by Andrew McLaughlin, Director of Global Public Policy Hundreds of millions of users around the world use Google Earth . Many of the...Google Public Policy Blog
‘NO IFS, ANDS, OR BUTS’ - Typewriter Concrete Poetry, 2024. Taken from a lover calling me beautiful and than stating; ‘no ifs, ands, or buts’ a frase I had never heard before.
#film #photo #write #artist #analog #image #art #oc #arte #poet #poem #poetry #arts #write #image #vispo #poem #design
Alex@rtnVFRmedia Suffolk UK reshared this.
Sebastián Andrés Vis is woordkunstenaar. Zijn kunst maakt hij op de typemachine. 'Schrijven op een typemachine geeft me de mogelijkheid tot het maken van visuele composities op een totaal andere manier dan dat ik het op een computer zou doen.'Bibliotheek Utrecht
Marcelo likes this.
Sebastián Andrés Vis is woordkunstenaar. Zijn kunst maakt hij op de typemachine. 'Schrijven op een typemachine geeft me de mogelijkheid tot het maken van visuele composities op een totaal andere manier dan dat ik het op een computer zou doen.'Bibliotheek Utrecht
"Demasiado estresante": la generación Z es un desastre para la cocina, y lo admiten al cocinar un simple huevo
Como si la vida de adulto joven no fuera ya lo suficientemente complicada, la Generación Z se ha hecho de un nuevo enemigo: la cocina. Resulta que al menos dos tercios de los zoomers carecen de habilidades culinarias básicas. El resultado es evidente, se…
Como si la vida de adulto joven no fuera ya lo suficientemente complicada, la Generación Z se ha hecho de un nuevo enemigo: la cocina. Resulta que al menos...Ismael Garcia Delgado (Xataka México)
Veo que el CEO de Spotify también apoya a Trump.
Nunca es tarde para recordar dos maravillas de aplicaciones para sustituirlas.
- Spotube: Te permite escuchar música en streaming, guardarla, listas prefijadas etc.
- Antenapod: para escuchar podcast.
Bonus: NewPipe
Funciona muy aleatoriamente, pero cuando lo hace te permite bajarte las canciones para poder volver a antes de 2010: con las canciones bajadas en nuestros dispositivos.
Rebonus: mirad el hilo para más recomendaciones.
Sindicato argentino de maquinistas entra em greve
www.prensalatina.com.br/2025/01/28/sindicato-argentino-de-maquinistas-entra-em-greve
Buenos Aires, 28 jan (Prensa Latina) O sindicato La Fraternidad, que representa os maquinistas de trens na Argentina, realiza hoje uma greve de seis horas para exigir melhores salários. The post Sindicato argentino de maquinistas entra em greve appeared…
Juliana Santos escreveu:
A prefeitura de Curitiba não doa os materiais para todos, mas para algumas pessoas que foram atrás. As mães alegam que a escola pede um cadastro feito no Centro de Referência de Assistência Social (CRAS) e muitas delam reclamam que são constrangidas porque querem saber por que, por exemplo, não foi usado o bolsa família para comprar, por que não conseguiram trabalho ou avisam que não tem como pegar na semana
plural.jor.br/periferias-plura…
Padre redentorista faz campanha para ajudar crianças da cidade a terem o material escolar cobrado pela PrefeituraPedro Carrano (Plural)
Polônia acusa Rússia de tentar influenciar eleições presidenciais | CNN Brasil
https://www.cnnbrasil.com.br/internacional/polonia-acusa-russia-de-tentar-influenciar-eleicoes-presidenciais/?utm_source=flipboard&utm_medium=activitypub
Posted into Notícias @not-cias-FlipboardBR
Vice-primeiro-ministro polonês, Krzysztof Gawkowski, alegou que a Rússia está recrutando cidadãos poloneses pela dark web para espalhar desinformaçãoBarbara Erling (CNN Brasil)
Governo da Bahia anuncia ampliação de políticas de assistência social e proteção às mulheres
O Governo do Estado da Bahia anunciou, durante a reunião da Comissão de Intergestores Bipartite (CIB), um conjunto de ações para ampliar a proteção social, com ênfase na assistência às mulheres em situação de violência. Entre as iniciativas, estão o aumento de 40% nos recursos destinados aos Centros de Referência de Assistência Social (Cras), a criação de novos centros de…
Editora Três wrote:
Entendemos que essa situação pode trazer instabilidade para aqueles que possuem clientes fixos e boas vendas.
Infelizmente, produtos como jornais e revistas se tornam cada vez mais escassos no mundo atual.
Marcelo likes this.
reshared this
Marcelo and SinMisterios reshared this.
Aqui está uma descrição de texto alternativo para a imagem:
A imagem é um painel de uma história em quadrinhos, aparentemente de uma história de terror ou fantasia. Mostra um personagem, que parece ser um homem, abrindo uma porta de madeira escura e detalhada que parece ser feita de madeira escura e velha. A porta está em uma parede de tijolo. Do outro lado da porta, há um cômodo com uma grande estante repleta de livros. Há uma bolha de fala acima da cena com um texto que diz algo como: "O que é isso? Parece... Nossa Senhora! Essa deve ser a biblioteca de Satanás!". A cena é escura e sombria. Há uma atmosfera de mistério e suspense.
Fornecido por @altbot, gerado usando Gemini
poooo será que dava pra conversar de disponibilizar em alguma plataforma além do Telegram?
deixei aquela plataforma a algum tempo e trouxe comigo minha pequena biblioteca de quadrinhos e livros que guardava lá e agora pensei se não valia a pena compartilhar o que tenho mas gostaria de fazer isso sem envolver platadormas de bilionários fascistas e poder incluir mais gente.
Tiago Bugarin likes this.
Resenha das Gurias wrote:
A convidada do Resenha das Gurias desta semana é a zagueira Giovanna dos Santos, 27 anos, reforço colorado para a temporada. Ela atuava no Torrense, de Portugal. Gi Santos já atuou também em clubes da Noruega, Colômbia e Turquia.
Página do episódio: podcasters.spotify.com/pod/sho…
Arquivo de mídia: anchor.fm/s/998844f8/podcast/p…
CHAMANDO TODES DE JEFFERSONVILLE
Gnt, eu meio que tive a ideia de fazer um tinder do Jefferson no final do ano passado mas a ideia não foi pra frente muito por conta da minha inexperiência e falta de habilidades. Algumes de vocês teriam interesse em ajudar a tirar essa ideia do papel e ajudar os corações tistes do Jefferson? 
Precisamos de pessoas com boas ideia e que poderiam liderar um projeto desses tbm. Toda ajuda é bem vinda 
Marcelo likes this.
reshared this
tiffs, Abracadabra da Lady Gaga and Marcelo reshared this.
sim, toda a plataforma é um aplicativo de encontros se você souber flertar.
E um reduto de cristãos fervorosos é um dos melhores lugares para conseguir um amante ou sugar daddy – Zero chances de que queira te assumir. Se você mentir que já é casado melhor. Se você realmente for, perfeito!
@NoahLoren @duran THIS IS IT FOLKS, I'M GOING IN
(sem exposição de ninguém nas redes, fique tranquila, só exposição de sórdidos detalhes na DM 
)
Mônica Bergamo wrote:
... Brizola, que foi governador do Rio Grande do Sul entre 1959 e 1963, foi ao banco e depositou um cruzeiro na conta da Bond & Share.
www1.folha.uol.com.br/colunas/…
Livro da jornalista Karla Monteiro tem lançamento programado para o fim de ano pela Companhia das LetrasFolha de S.Paulo
A Justiça paulista determinou a penhora da picape Hilux do ex-governador Ciro Gomes (CE) em razão de uma dívida de cerca de R$ 6,6 mil com os advogados do site "Diário do Centro do Mundo".A decisão foi tomada pela juíza Ligia Dal Colletto BueRogério Gentile (UOL)
A Justiça paulista determinou a penhora da picape Hilux do ex-governador Ciro Gomes (CE) em razão de uma dívida de cerca de R$ 6,6 mil com os advogados do site "Diário do Centro do Mundo".A decisão foi tomada pela juíza Ligia Dal Colletto BueRogério Gentile (UOL)
Antes o cartão de passagem se chamava NatalCard na capital. Aí mudaram pra NuBus.
O logo ficou uma porcaria. O nome NuBus ficou estilizado como RJBus e o segundo U parece um J invertido.
S. Tomás de Aquino: pt.wikipedia.org/wiki/Tom%C3%A…
Tomás de Aquino, em italiano Tommaso d'Aquino (Roccasecca, 1225 – Fossanova, 7 de março de 1274), foi um frade católico italiano da Ordem dos Pregadores (dominicano) cujas obras tiveram enorme influência na teologia e na filosofia, principalmente na tradição conhecida como Escolástica, e que, por isso, é conhecido como "Doctor Angelicus", "Doctor Communis" e "Doctor Universalis". "Aquino" é uma referência ao condado de Aquino, uma região que foi propriedade de sua família até 1137. Tomás de Aquino tinha abordagens diferentes para com seus antecedentes como Agostinho de Hipona, pois conciliava a fé com a razão. Seu pensamento teológico e filosófico inspiraram inúmeras gerações de pensadores. Seu magnum opus é chamado Suma Teológica.Contribuidores dos projetos da Wikimedia (Fundação Wikimedia, Inc.)
A post from the developer of WireGuard on the severe security flaws and lack of trustworthiness of F-Droid:
gitlab.com/fdroid/fdroiddata/-…
This led to them including a self-update system which was openly implemented and documented. F-Droid was unaware they'd shipped it for half a year, and by then WireGuard had essentially escaped from in their words being held hostage by F-Droid.
This was a rare case where an app used developer signing keys via their flawed reproducible builds system. Most don't.
Per https://f-droid.org/en/docs/Inclusion_Policy/ The software must not download additional executable binary files (e.g. addons, auto-updates, etc.) without explicit user consent....GitLab
Marcelo likes this.
reshared this
Lazarou Monkey Terror 🚀💙🌈, Shannon Prickett and Marcelo reshared this.
F-Droid has incredibly poor security practices and a strong anti-security attitude held by most of the people involved. They've consistently engaged in coverups of vulnerabilities and targeting multiple security researchers with libel and harassment.
It's a massive single point of failure and not worthy of the trust many people are placing in it. It's adding another trusted party compared to using the apps built and signed by the developers. It is not avoiding trust in the developers of apps.
reshared this
LadyStork reshared this.
The risks F-Droid excels in managing by being a curated app store is protection from scam and phishing apps.
I know of not a single case where a fake or scam app has been part of F-Droid, which makes it a lot easier to recommend.
Do you have any good alternative curated app store?
@sheogorath It's curated in the sense that they only have open source apps in it. They don't have any real standards beyond stuff being fully open source. The selection of apps is very arbitrary and tons of high quality modern apps are not included in it while tons of obsolete and insecure apps are included. Some apps which would be fine to use are not because they end up doing weird things like downgrading the dependencies
F-Droid has absolutely had fake/scam apps including of one of ours.
Regularly not shipping critical Firefox security patches for months is the norm for the main F-Droid repository. Whether or not they sign the apps themselves as they do for the vast majority of apps, updates can be indefinitely delayed based on issues with their outdated infrastructure or their Debian-style downstream patches needing to be updated.
For the small subset signed by the app developers, many kinds of disagreements between F-Droid and developers will mean an end to receiving updates.
You are not the only ones that struggle with f-droid. (There is an ongoing struggle to fix certificate pinning by f-droid by a former maintainer, which has neither been acknowledeg nor accepted).
But the question is: what alternatives are there? As far as i can tell, f-droid is the only large scale-repository of open source apps there is.
@newhinton F-Droid doesn't actually package as much of the open source Android app ecosystem as people think it does and a lot of what are packaged are obsolete, unmaintained apps instead of the many high quality ones which aren't in it.
F-Droid stands in the way of better solutions being developed and adopted. It existing is the problem. It stops a group of people who actually care about providing proper updates, security, etc. making something better.
I think you should stick to technical objective criticism. If you want to move to social science speculations then I reply that messages like this weakens your point.
The evil marketing department of F-Droid Inc. is preventing better alternatives to be known... no wait, no even *exist* because security experts feel defeated from the start. This is what your whining sounds like.
The reality? Those security experts just don't volunteer.
Oh come on, it's FOSS we are talking about, just fork or start your project. In fact I never said they should contribute to F-droid specifically if they don't want to.
@newhinton
I use Neo Store, but I'm not entirely sure if it is a valid alternative or just a reskin of sort of F-Droid.
There's Obtainium as well but that's a different beast entirely.
@newhinton There is a new project here accrescent.app/
I don't know much about it, can't verify anything, just heard about it
@Kulei @newhinton We recommend using Accrescent for the apps which are available through it. It's not specific to either open source apps or privacy focused apps but rather is meant to become a Play Store alternative.
Obtainium + App Verifier for getting apps directly from developers, although we'd prefer a leaner and more security focused approach than Obtainium.
Isn't Obtainium just worse than F-Droid? Considering that F-Droid atleast does some of the antivirus scanning and such. It's very difficult to verify whether an app is secure or private (even for people that trust aGPLv3 or just open-source apps intrinsically more than proprietary ones there is no guarantee of safety or privacy).
F-Droid still does better checks than something like Play Store, right?
> Isn't Obtainium just worse than F-Droid?
No, since it avoids added another trusted party which has proven to be highly untrustworthy.
> antivirus scanning
It's performative.
> F-Droid still does better checks than something like Play Store, right?
F-Droid doesn't have a target API level standard or other basic standards that the Play Store and Accrescent enforce. They don't do any serious review, it's the same largely imaginary system as the Play Store in that regard.
BohwaZ reshared this.
> F-Droid doesn't have a target API level standard or other basic standards that the Play Store and Accrescent enforce. They don't do any serious review, it's the same largely imaginary system as the Play Store in that regard.
Isn't it supposed to be possible to target older APIs even in current builds?
@lispi314 @Kulei I think they meant the target api that should always be the latest available, ideally.
In android you have targetSdk and minSdk.
I think minSdk can be as low as you want, but targetSdk should be always as high as possible.
This way the app is still up-to-date security-wise, even if it still works on older sdks.
If you have a targetSdk that is too low, you are likely pulling in security issues with those sdk's
While I appreciate bringing up the security concerns the existence of alternatives to #FDroid I do not think we have those when it comes to pure FOSS apps without the usual big corporate trackers/libs. #Accrescent lists a few apps and fails to provide relevant information about them (such as requested permissions). E.g. #Qlango includes multiple tracking libraries by #Meta / #Facebook and doesn't look like it is FOSS to any degree. Even while the #FDroid repo is not carefully curated I don't run into traps like these. 🤷
There is a need for a curated and maintained FOSS app repo and currently there is nobody but @fdroidorg providing it. #Obtainium, #Accrescent are mostly option for expert users who exactly know who to trust and what they are looking for. @Kulei @newhinton
#Accrescent IMO absolutely needs
- better description of app
- permissions list
- license info of app
- download size of apk
- website link if available
- (minimum Android sdk)
@cryptgoat @mynacol @GrapheneOS @fdroidorg @Kulei @newhinton
@accrescent Sounds great. I am looking forward to it. Thanks for #Accrescent and contributing to the #FLOSS community. I greatly appreciate that.
Adding an info whether an app is FLOSS is helpful.
@Kulei @newhinton What checks does Accrescent perform other than enforcing a minimum API level? I assume more checks than Google Play, but what are they?
F-Droid has a warning like "this app was built for an older Android version and cannot be updated automatically" (rough translation). I assume this refers to the app targeting an old API level?
> What checks does Accrescent perform other than enforcing a minimum API level? I assume more checks than Google Play, but what are they?
You can read about their requirements on their site. They have a system for tagging apps that's being implemented for marking which ones are open source, have reproducible builds, etc. If you only want to use it for open source apps, you'll be able to do that. Apps being open source does not mean other standards aren't relevant.
> F-Droid has a warning like "this app was built for an older Android version and cannot be updated automatically" (rough translation). I assume this refers to the app targeting an old API level?
Apps with an ancient target API level aren't possible to fully automatically update. This is F-Droid warning that their automatic updates don't fully work due to not complying with that minimum target API expectations, not them adding a warning about target API level.
Well that's sad. Having to implement your own updater in every app is annoying when F-Droid can just do it from a bunch of repos. It would be nice if there were a simple generic solution that let you bootstrap a single updater app and then add repos.
For traditional UNIX systems, there's a big benefit in having a single repo, because you distribute a load of shared libraries and you want a consistent build of all dependencies. With Android / F-Droid, each app is totally independent (or depends on things via late-bound intents) and so there's no real benefit from the centralisation, other than needing to deal with people who have the kind of purist views that put off users.
@david_chisnall F-Droid isn't updated dependencies across apps and has even down downgrades of security critical dependencies which introduced security vulnerabilities to apps again.
Traditional Linux distribution repositories have been moving away from working that way though with packaging systems like Snap and Flatpak along with projects having dependencies done in a way they're not good at handling. Distributions aren't really capable of dealing with all the dependencies in practice.
I wouldn't put Go and node.js in the same category when it comes to dependency culture. Also, go build will put all dependencies in one binary.
@ejim @david_chisnall GrapheneOS has been changing these interfaces for permissions, ADB key approval, etc. to have a 1 second delay before it can be approved to avoid this issue.
Either way, you already have the app installed so it can run arbitrary code. If it has network access it can download and run code or change the existing code's behavior based on our. Our dynamic code execution restrictions prevent running dynamic native code or loading classes with the Android Runtime, not all code.
F-Droid never shipped Firefox.
Do you mean Fennec Fdroid?
Oh and btw
avg 4d 1h 49min 3s
max 1w 18h 51min 8s
min 22h 19min 51s
gitlab.com/ironfox-oss/IronFox…
Are there plans to include IronFox as part of the official F-Droid repo, as Mull was? Otherwise, perhaps on IzzyOnDroid repo, or lastly a custom IronFox one? Even...GitLab
fwiw, they do ship an app called FFUpdater, which, as far as its UI suggests, downloads the packages from Mozilla/Github. Updates are still manual, though does mostly cut out the F-Droid-in-the-middle.
For apps that are signed by the npubs of the developers you know and trust, I understand it to be a better alternative. It will be amazing once all apps are signed by dev npubs.
AFAIK apps that at signed by ZapStore are requiring you to trust Zapstore's build processes, similar to Fdroid.
@eee8f90244589abc852b024493a077522157057e6d565788d8d09473b81d14a9 @78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d @a4a6b5849bc917b3befd5c81865ee0b88773690609c207ba6588ef3e1e05b95b
We recommend using Accrescent for the apps which are available through it. It's not specific to either open source apps or privacy focused apps but rather is meant to become a Play Store alternative. It provides developer signed builds.
@eee8f90244589abc852b024493a077522157057e6d565788d8d09473b81d14a9 @78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d @a4a6b5849bc917b3befd5c81865ee0b88773690609c207ba6588ef3e1e05b95b
Obtainium + App Verifier for getting apps directly from developers, although we'd prefer a leaner and more security focused approach than Obtainium.
@eee8f90244589abc852b024493a077522157057e6d565788d8d09473b81d14a9 @78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d @a4a6b5849bc917b3befd5c81865ee0b88773690609c207ba6588ef3e1e05b95b
Accrescent requires developers to log in with a github account not giving alternatives. So you basically need to agree to some st***d tos from a us big tech company to publish an app? This is a complete fail, so no alternative to fdroid, sorry.
@d4c97d420f3a70722da9c67245b2d9b3da75bf3d9b795e8f8b42c322c7f96593 @001863c7837dc05c768e4ed8d6ab2dd65d5f6af9df7e2a93190acf7f4a915c7a
> Accrescent (from Graphene OS),
Accrescent is not from GrapheneOS. It's a third party project. We mirror it in our app store so people can obtain it securely and then use it to get apps like Molly with a chain of trust from GrapheneOS.
@001863c7837dc05c768e4ed8d6ab2dd65d5f6af9df7e2a93190acf7f4a915c7a @d4c97d420f3a70722da9c67245b2d9b3da75bf3d9b795e8f8b42c322c7f96593 Even first party app stores built into the OS can't bypass the standard package manager signing rules. The OS itself provides a strong Trust On First Use model through this.
Verifying the download for the initial install is what's left up to the way the app is being obtained. As an example, our App Store has signed metadata with a timestamp and hashes of the APKs.
When we are pointing out that harassing, did u tried to black mail them 🤭🤭
Its weird to read this by GraphenOs profile 🤣🤣🤣🤣
One of my fav comments under one random YouTube video-
“One of the inherent advantages of Open Source is that when a project needs new leadership, but the current leadership doesn't recognize that fact, the project can simply be forked, perpetuating the good idea and leaving the failed leaders to howl into the abyss until / unless they decide to grow up.”
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.www.youtube.com
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.www.youtube.com
BohwaZ reshared this.
@dalias @NebulaTide Play Store used to be a way to obtain developer builds of apps signed by the developers but has moved away from it and the code transparency system they provide isn't a complete solution to verifying what they generate and sign from the app bundles uploaded by developers.
For our own app repository, we don't want to build thousands of open source apps largely not aligned with our approach, especially without doing a pass updating dependencies and adding basic hardening.
@dalias @NebulaTide Accrescent is a project we recommend as an open source replacement for what the Play Store used to be but it's still in an early phase without a lot of apps. Makes sense to use it for the apps in it though.
It's a secure way to distribute developer builds where developers upload their releases. It's therefore not going to be a similar single point of failure, but it's also only going to exerting a small amount of influence on the app developers.
@dalias @NebulaTide F-Droid repeatedly not giving users Firefox updates for months because they have to slowly update their patches removing things they dislike is an example of how much of a disaster it ends up being. Users getting browser security updates is critical.
They've also had a long history of doing weird things like rolling back security critical dependencies compared to what apps use themselves. They do similar things for their own apps too to support ancient Android versions.
Yes, I think it's best to install apps from GitHub releases, and subscribe to GitHub releases of your apps to get notifications about new releases. But that only works for apps hosted on GitHub (GitLab should have similar functionality).
But your own tool to verify certificates sounds very interesting.
@tibs @dalias @NebulaTide According to F-Droid themselves, their Firefox fork uses services which track users. The telemetry they're disabling is not mandatory and it's as if they're trying to make the changes more invasive rather than doing the least invasive change possible. Some of their changes include adding bookmarks/links to the F-Droid site.
The only thing they truly consider a blocker to updates is removing the client side Google Play libraries which blocks their updates for months.
We recommend using Accrescent for the apps which are available through it. It's not specific to either open source apps or privacy focused apps but rather is meant to become a Play Store alternative. It provides developer signed builds.
Obtainium + App Verifier for getting apps directly from developers, although we'd prefer a leaner and more security focused approach than Obtainium.
What's your recommendation regarding @IzzyOnDroid and their reproducible builds approach?
Use this instead of f droid repo?
I think you're dismissing the important curation work of F-Droid.
Sure it's imperfect and security patches take too long, an additional intermediary etc.
But using Obtainium [edit: I was wrong about Accrescent] just leaves the users to their own devices installing any app, with zero oversight.
Far from ideal.
You seem to be suggesting bad will from FDroid management, it would be better if you were more explicit on why you think that way, instead of just insinuating.
BohwaZ reshared this.
> I think you're dismissing the important curation work of F-Droid.
They don't do important curation work. They do a very poor job with that and their changes have consistently introduced security vulnerabilities and broken apps.
> Sure it's imperfect and security patches take too long, an additional intermediary etc.
It's not only an extra intermediary but a group of people who have demonstrated themselves to be highly untrustworthy with underhanded malicious behavior and coverups.
> You seem to be suggesting bad will from FDroid management, it would be better if you were more explicit on why you think that way, instead of just insinuating.
They've done repeated coverups of security vulnerabilities including ones their own team discovered. They regularly refuse to fix serious security and other flaws. They've engaged in serial harassment towards security researchers, including but not limited to people involved in the GrapheneOS project. We're not insinuating.
We're warning our users away from putting themselves at risk through an unsafe platform with untrustworthy developers.
@jcast Accrescent has standards for the apps which are included and is going to include tags for filtering based on which apps are open source, have reproducible builds, etc.
github.com/accrescent/meta/iss…
It is in an early phase where it's not open to all developers submitting their applications yet and doesn't have a lot of applications. It is intended to provide an open source, secure and trustworthy alternative the Play Store not a small catered repository of apps they want to promote.
Developers should be able to request an "open source" label for their app after it has been published (we can add label requests to the draft creation process later on). This request should then be...GitHub
This looks as ugly for WireGuard than for F-Droid.
WireGuard current app on Izzy repo for F-Droid does not tell users where it's updating from, does not ask for consent and it's opt-out. So there were clearly not happy about letting users know.
Not to diss WireGuard which is course an awesome project.
A growing number of Izzy repo apps are reproducible builds.
You replied to my comment on Wireguard choosing very deliberately to hide background updates from users with an adhominem on Izzy.
Not taking his side, and understandably you have removed your trust from them, but this doesn't look good on you.
I've read Izzy's comments on several forums for many years now, and I never witnessed nothing but either praise or constructive criticism of GOS.
Your mileage might vary, but from my perspective it just sounds you're each fiercely defending your ground. GOS focusing on security and FDroid on the 4 freedoms.
Izzy regularly spreads misinformation about GrapheneOS and has participated in harassment towards our team. Call it what you want, doesn't change what it is.
GrapheneOS is a privacy project. No matter how many times you folks misrepresent what it is and falsely claim it cares about security over privacy and all the other misinformation.
I wasn't aware of that privacy vs. security controversy.
I'm in no way affiliated with FDroid and am seriously taking notes of your concerns and criticism.
I also appreciate your availability to communicate so transparently, and usually in a very mature way.
Just noting two things here: Wireguard opaque attitude, and you not replying to that concern.
Are there plans to include IronFox as part of the official F-Droid repo, as Mull was? Otherwise, perhaps on IzzyOnDroid repo, or lastly a custom IronFox one? Even...GitLab
You're replying to me as if I was defending Izzy.
I'm not, I see things got ugly.
But you're still choosing to go down the path of attacking him instead of replying to a legitimate concern about Wireguard's choices.
Sure that shows two things:
- FDroid review system is to say the least flawed.
- Given that the new WG version on Izzy's repo does not even prompt the user for opt-out bg updates, WG chooses to be opaque (edit: to users), which I find concerning.
In practical terms, this means WG installs from FDroid, using Izzy repo and updates in tje background without ever requesting user permission or producing a notification.
So it really sounds at this point you're purposedly misleading and obscuring this fact.
No, apps require the user to grant a permission to request to do app installs or updates:
grapheneos.social/@GrapheneOS/…
@jcast No, that's not how it works on a basic level. You would to explicitly grant the privilege for installing packages to WireGuard in order for it to update itself. The permission for installing packages grants the ability to do unattended self-update and of other apps where the current installer is the app that's asking to do it.
No, apps require the user to grant a permission to request to do app installs or updates:
grapheneos.social/@GrapheneOS/…
@jcast No, that's not how it works on a basic level. You would to explicitly grant the privilege for installing packages to WireGuard in order for it to update itself. The permission for installing packages grants the ability to do unattended self-update and of other apps where the current installer is the app that's asking to do it.
To clarify, I'm not using GOS, but another AOSP based OS.
Maybe GOS is more has more explicit permission model, but my issue is with WG, not GOS in any case.
No, apps require the user to grant a permission to request to do app installs or updates:
grapheneos.social/@GrapheneOS/…
@jcast No, that's not how it works on a basic level. You would to explicitly grant the privilege for installing packages to WireGuard in order for it to update itself. The permission for installing packages grants the ability to do unattended self-update and of other apps where the current installer is the app that's asking to do it.
Eure Meinung/Einschätzung dazu würde mich sehr interessieren.
to all of you asking what to use instead/how to install applications in the most secure way: youtube.com/watch?v=IAoCfrqxIE…
A very nice step-by-step explanation on what apps to use and how the sources hierarchy should look like
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.youtube.com
@37974f34f799d8d9930b0114a2b0b5d1fcd1a35011bb1f6ed5839800605b9b1d @d8f38b894b42f7008305cebf17b48925654f22b180c5861b81141f80ccf72848 grapheneos.social/@GrapheneOS/…
@d8f38b894b42f7008305cebf17b48925654f22b180c5861b81141f80ccf72848 Yes, for the apps available there. Note it's building an alternative to the Play Store meant to be usable for everything.. Apps being there is not a recommendation to use them.
To provide some helpful context for other people, you've been repeatedly participating in targeting our team with harassment through spreading Kiwi Farms style content targeting them with spin and fabrications including from a Kiwi Farms user you support who regularly targets people in this way:
@Erklaerbaer Obtainium is a good concept, but it needs a more focused implementation based around shipping signed metadata with the locations for obtaining the apps and key fingerprints to bootstrap verification.
Accrescent will be providing a far larger selection of apps and tags for filtering based on whether they're open source, have reproducible builds, etc. It's in an early phase and is being built out. It needs people to support it, and unfortunately F-Droid folks are trying to harm it.
@dalias @a1ba @NebulaTide They did provide a code transparency system to prove the generated APKs match the provided code but it does not cover all the relevant forms of resources, just all the code, so we don't think it provides what is needed even if it was widely adopted to verify what's generated.
Google essentially moved to the system used by the Apple App Store where developers upload bundles of signed code which are then turned into the actual signed packages by Apple and Google.
@dalias @a1ba @NebulaTide There's a lot of pain releasing apps through the Play Store in general aside from this, but the same applies to most alternatives to it.
The delay for app review is at least generally down to around 1 day right now. There were times in the past where it took a week or more to get an update approved and there's no way to get it accelerated for a critical update.
There are some very painful policies and it can be very painful to get the allowed exceptions approved.
PKs Powerfromspace1
in reply to Christian Schwägerl • • •Erik Jonker
in reply to Christian Schwägerl • • •Eldritch kcarruthers
in reply to Erik Jonker • • •Tyrone Slothrop
in reply to Christian Schwägerl • • •Leaving space for a more detailed analysis, I’m just going to remark
HAHHAHAHAHAAAAAHAAAA 😂😂😂
Erik Uden 🚩
in reply to Christian Schwägerl • • •reshared this
Erik Uden 🚩 and Lord Caramac the Clueless, KSC reshared this.
I'd prefer some rum
in reply to Erik Uden 🚩 • • •RowinSpeez
in reply to Christian Schwägerl • • •MicroBlog Castellano
in reply to Christian Schwägerl • • •reshared this
Sally Strange reshared this.
Shine
in reply to MicroBlog Castellano • • •stux⚡️
in reply to Christian Schwägerl • • •I had a feeling
But meh
They're all thieves anyways
Jon Juarez
in reply to Christian Schwägerl • • •