Hans-Christoph Steiner @eighthave@librem.one
Joined Aug 2019
Hans-Christoph Steiner
boosted
Max Schrems and his tiny nonprofit NOYB deserve limitless praise for their extraordinary persistence and achievements. But it's a shame for EU policy that GDPR enforcement against big tech and in the broader digital economy relies on a nonprofit and that much of it fails so hard.
@gwagner That article does have a good outline of the issues, which The Economist is good at. It also dismisses the ideas with an oversimplified, sweeping generalization. The Economist is also good at that. "It turns out voters do not much like stagnation; the newish premier, Giorgia Meloni, rails against “Greta Thunberg’s ideology” killing jobs." People don't like struggling or not having jobs. Many growth-centered economies have delivered this state, that can't be pinned on de-growth.
@Billie Very nice to see this effort! #Android rebuilds lives again! Has anyone tested to see if they are #reproducible?
Hans-Christoph Steiner
boosted
You don't need to download the #android #sdk #binaries from #google .
You can compile the #sdk by yourself from the source code to write #android #apps.
Check this repository at #codeberg , it will do the job for you.
All you need are the scripts from this #repo , 32 GB #ram , approx. 300 GB free disk space and some patience.
Then, you can start coding for #android without the proprietary #sdk binaries from #google!
@ntnsndr @cwebber @fossandcrafts @SylvieLorxu @mlemweb @efoundation I don't know much about how their app works, but I can tell you that #FDroid takes privacy, security, and transparency very seriously, for example https://f-droid.org/docs/Security_Model
@ntnsndr @cwebber @fossandcrafts @SylvieLorxu @mlemweb @efoundation /e/ foundation prioritizes ease of use over #FreeSoftware, they are more about being #Google-free. If you want human-reviewed Free Software, then stick with f-droid.org as your only app source. The official #FDroid client provides free software, as easy as possible.
Hans-Christoph Steiner
boosted
Episode 57: F-Droid (featuring Sylvia van Os & Hans-Christoph Steiner!) https://fossandcrafts.org/episodes/057-f-droid.html
F-Droid, a repository of free software on your Android device! @cwebber interviews F-Droid developers @SylvieLorxu and @eighthave@social.librem.one alongside chair of the F-Droid board... @mlemweb!!!
Hans-Christoph Steiner
boosted
Let's be clear: $1.8b for "AI" translates to ~$1.8b handed to Big Tech companies to license infrastructure, data, and APIs.
AI is a corporate technology.
This is a subsidy to the richest companies in the world, justified via rewarmed cold war imaginaries.
Hans-Christoph Steiner
boosted
Putin’s energy blackmail has failed.
One year after presenting #REPowerEU, we have reduced our dependency on Russian gas by three-quarters.
Everyone has played their part in building a more independent 🇪🇺 and we are more united and stronger than ever in preparing for next winter.
I'm often surprised to hear that many people believe that #OpenSource was this new radical idea in software development that came about in the 80s. That is actually backwards. Open Source was the default way software was developed before the 80s, and #proprietary development changed that. The #FreeSoftware movement was a direct response to software going #proprietary. It put #UserFreedom front and center as the reason why #software should be free and open.
Hans-Christoph Steiner
boosted
again: paying for travel and lodging is nice, but traveling abroad and talking at a conference is *work* - I can't work for free. Especially if your conference charges >1000 USD entrance fees.
@bagder @mjgardner @icing In the case of well established, well documented, widespread protocols, I totally agree. There are other factors that change the equation. Is it a new protocol? Are the docs good? Do the people involved in implementing have a means to communicate? And human input changes the equation in a big way. No one expects humans to type HTTP, TLS, or TCP.
Hans-Christoph Steiner
boosted
Mullvad VPN and the Tor Project today present the release of the Mullvad Browser.
A privacy-focused web browser designed to be used with a trustworthy VPN instead of the Tor Network.
Read the full story and download the browser here.
Hans-Christoph Steiner
boosted
Tik Tok ist zwar lustig, kann aber zum echten Sicherheitsrisiko werden, wenn man die User:innendaten aggregiert & analysiert. Thomas Lohninger war dazu in der ZIB 1:
@rene_mobile @reto @signalapp Your post is a nice breakdown. There is a tricky balance here: of course more systems implementing trusted E2EE methods is a good thing, but its turned into a marketing bullet point, like "fully private because E2EE". As for #Signal, last I've seen, they don't really do Reproducible Builds. Their process uses the binaries for their own native code, and just reproduces the Java and Android resources part. And Signal releases still include proprietary libraries.
Hans-Christoph Steiner
boosted
Which means, you can only use that if your app's minSDK is >= Android 9. (At least that's what I remember from when this feature was originally introduced)
Wireguard's minSDK is Android 5.0.
F-Droid might start to look into this though, it's only a few years off until this can can be reaslistically used in the wild.
Hans-Christoph Steiner
boosted
The Wireguard android app is now Reproducible and distributed with Jasons own signing key.
https://lists.zx2c4.com/pipermail/wireguard/2023-April/008045.html
Pretty cool.
Hans-Christoph Steiner
boosted
🇺🇦 🇹🇼
#WhatsApp implementing #KeyTransparency is pretty nice, and definitely an excellent step in the right direction against shadow accounts and the service provider trust problem. However, without the client being #OpenSource, it is not that meaningful. Yes, of course somebody could implement an independent monitor for the transparency log to check keys registered for an identity, but what percentage of the user base will actually do that when the only realistic way to use the service is to rely on the #proprietary client, which can still be used to maliciously target (groups of) users to break #E2EE?
Secure messenger clients should both use identity security protections like #KeyTransparency and have a *default* implementation that is #OpenSource and, ideally, be distributed with #BinaryTransparency and verified through #ReproducibleBuilds. Oh, and allow other identifiers than just phone numbers (still looking at you, @signalapp - which is otherwise ticking a lot of the right checkboxes).
Hans-Christoph Steiner
boosted
@Gargron @fdroidorg That is incorrect and the GitHub issue shows it. The F-Droid team asked for .apk files of the Google Play build as it was compliant with F-Droid policy. Not a new flavor.
Mastodon made a change to the version they provided to F-Droid (the GitHub version) that broke policy. F-Droid even went out of their way to tweak policy in Mastodon'a favour to not require complete removal of the in-app updater, just a good explanation.
Joined Aug 2019
