Hans-Christoph Steiner @eighthave@librem.one

#Gradle and #Java both operate by loading all dependencies and classes that are used in a project, unlike C or C++, which can #ifdef them out. This makes #FreeSoftware a bit harder when touching proprietary libraries, since all dependencies must be present at build time. If a build requires proprietary blobs, the resulting binaries cannot be free software. One workaround is to make free stub classes in build flavors to replace the proprietary build dependencies when building.

After years of being one of the few to keep pushing dependency verification and even #PGP signatures on binaries, while getting responses like "gpg in 2022? wtf?", it is gratifying to see that not only has #Gradle full adopted this workflow, but also #Android developers at Google:

https://android.googlesource.com/platform/frameworks/support/+/HEAD/gradle/verification-keyring.keys

@ShallowWater@mas.to @gloam@mastodon.sdf.org @jxyzn @mattblaze It goes deeper than not being Twitter, Twitter comes from startup and corporate culture, where users are the product. Mastodon comes from free software and hacker community culture, were users are people that you want to communicate with, free from abuse from random people on the internet.

Thanksgiving: Celebrating the day Americans fed undocumented aliens from Europe

@neglesaks@mstdn.io Now that I think about it, there is a $25 fee for the account to publish apps, and now you have to set up a "payment profile". These things would dissuade lots of users from just posting their learning app, in my opnion.

@SylvieLorxu thanks for that info, I don't know what the criteria are. I am seeing your ratings coming over Tor without being logged into anything:

@aktivismoEstasMiaLuo @dsfgs @Some_Emo_Chick @cy@mstdn.io @strypey This is great! We need a lot more of this, since corporations are so good at hiding in the abstractions of modern life.

@GossiTheDog what happened to "obscurity is not security"? Shouldn't we leave it up there so more people can learn how best to defend against it? That code will still be 100% available in the ransomware forums. I suppose there could be something to gain from making ransomware code a little bit less available, but it also sets a dangerous precedent that people should not be allow to see "bad code". Like the article says "... Not Paying a Ransom" is a better defence

@ahf Its already in place, there is an onion service already set as an official mirror, its just run by people at fau.de. This is only about adding the onion service run by the #FDroid team 😃

We want to add the official #Tor onion service for f-droid.org as an official mirror, so that clients will automatically use it. Please test by sharing the repo link to #FDroid client then add it as a mirror:
https://gitlab.com/fdroid/admin/-/issues/12#note_1184095205

This should prompt to add it as a mirror, which is safe since the keys need to match. Click cancel if it offers to add a new repo.

@Strandjunker Why are Democrats exempt? There have been plenty over the years who blocked gun control and accepted money from the NRA, and there still are some.

@neglesaks@mstdn.io @neglesaks@mstdn.io That makes sense, but I wonder how many of those there really are. I would love to see data on those ~2.2 million apps without a single star.