Show more

@team Reminds me of how sold those counting machines that ran the Nazi death camps. Sure, the counting machines didn't directly kill people, but they did make the Nazi government more efficient at finding the people it aimed to murder. theatlantic.com/magazine/archi

We have defined a secure and usable architecture for decentralized package repositories that any mobile user can use and understand possible risks.

The next official release of the official F-Droid client will widely deploy this to our users. We then plan to make a final architecture document, so others can understand the whole model.

We would love any kind of feedback, our drafts are here: gitlab.com/fdroid/wiki/-/wikis

@kiri @fvbever The is fundamentally about . When started, recognized they could sell it better if it was Free Software because want free software and related freedoms. That led to Android becoming the largest OS in use today. Now Google has power. They have a clear track record of reducing user freedom in Android, and moving to a kernel without the GPL would give Google more power over users and the market.

@fvbever 's policy is Apache-2.0, with only case-by-case exceptions: source.android.com/docs/setup/

So clearly does not want GPLv2 there either. Plus a big part of 's development model is building proprietary software that is mostly community-maintained free software. That's harder to do with any license.

@fvbever @kiri while I do think there are some really specific cases where regulations do not allow third party software, that point has been massively leveraged to push against the . Those rules really are rare, and on top of that, there are many cases where manufacturers are banning third party software because it is a cheap way out, not because the regulations actually require that.

Large corporations like the hate on the even though it has brought them big benefits. would be nowhere near what it is without the GPL. I always saw 's kernel as their effort to get out of the GPL, since it would replace the Linux kernel. There was even media hype to that effect. Now I'm happy to see that Google is no longer supporting on Fuchsia. I see this as a win for

9to5google.com/2024/01/15/goog

@jnthnkl Sapio looks great! I guess it should serve as a replacement for plexus.techlore.tech/ Is there a public API available for this data? It would be quite useful. For example, an fdroid-compatible repo could use it when reviewing new apps for inclusion. In that case, the data should also include the Version Code in addition to the Application ID.

@uniqx this looks like it should be your next mobile device: look a phone with a trackpoint!

Its cool to see more and more apps using . It used to be so many apps just used for maps and then just failed on devices. For example, I just downloaded a city's bike sharing app made by a mega corp, and it uses MabLibre so works fine without Play Services. My experience used to be that all the navigation apps required Google.

I live near a branch of the and have seen beavers a couple of times. It is great to see them coming back. I didn't realize how dire the situation was: the population was done to 1200 a century ago cartographymaster.eu/wp-conten

@argv_minus_one Do you have a reference on that? It doesn't line up with my understanding. For example, Mozilla does not say anything like that in their criticism back in May, and it seems that things have improved since then blog.mozilla.org/netpolicy/202

Ok, my final struggle was getting to switch to the new . It seems that GnuPG was architected around a single smartcard per private key. Seems fine as a recommendation, but problematic as a strict requirement. It seems that GnuPG 2.4 has changed this, but I don't know the details.

Here's my switch scripted hack:
gitlab.com/-/snippets/3638931

Show thread

@argv_minus_one
Then if an employee wants to contribute to external free software that the company does not use at all then the shouldn't be liable for that software since they don't have any related commercial activity. It seems to me that work outside of commercial activity are exempt.

I worry about a key piece of the F-Droid funding model: we often get grants to improve , so the contributors who work on F-Droid pieces under contract might be liable. That's where I'm still unclear

2/

@argv_minus_one That seems like an extreme take on it. Have you heard any companies officially saying something like that? Companies are already setup to handle liability for many things, so if a company is liable for the software they create, and their software requires external free software, why would they now stop contributing to that external free software? They would be liable for it anyway, if their products require it. 1/

Jeder Mensch sollte wissen dürfen, was der Staat in aller Namen tut und wo unsere Steuergelder hinfließen. Wir sind deshalb heute beim Hearing im Verfassungsausschuss. Macht braucht Kontrolle & 🇦🇹 ein Grundrecht auf Informationsfreiheit.

@debian I'm still concerned but the Python Software Foundation's post about the 's Cyber Resilience Act () makes me optimistic that it could work for . I do agree with the core idea that companies should be held more accountable than they currently are. The key is getting it just right so that anyone can write whatever free software they feel like writing, and share it on the internet, without having to get a lawyer first.

pyfound.blogspot.com/2024/01/C

@hko that is great, we need tools like this. That is the easiest way currently to make a simple UX. I still hope that the core tools can be improved to provide a simple UX, that is much harder and takes longer. github.com/johndoe31415/hsmwiz is another tool like that.

@jr yes backups are essential! I maintain an offline backup in a separate physical location from both where I live and where work.

Show more
image/svg+xml Librem Chat image/svg+xml