Hans-Christoph Steiner @eighthave@librem.one

wow, #Bluesky just deleted all the comments for people who didn't like that users were objecting to them making it more like #Twitter:

There are direct links to the comments in:
https://tech.slashdot.org/story/25/04/18/2231252/users-react-to-blueskys-upcoming-blue-check-mark-verification-system

But they are no longer visible on the GitHub issue. Unfortunately, no one got a archive.org capture before that happened.

#verification #decentralization

@neil @fdroidorg Thanks, that would be very useful! Shall we just reach out to you via decoded.legal? Or we're reachable at team@f-droid.org

#Apple is supposedly the "privacy company" but apparently those sweet #SurveillanceCapitalism dollars are just too irresistable, so they are expanding their ad business:

https://www.techradar.com/pro/apple-rebrands-part-of-its-ads-business-in-major-expansion

#AppStore #privacy

@KazukyAkayashi that means that Droid-ify is using the index-v1.jar, which has a weak SHA1 signature. They should upgrade to index-v2. We have libraries for apps like Droid-ify to do that with. If I were a user, I'd file an issue to make them aware.

#security #droidify

@KazukyAkayashi Actually I see the bug now: it only shows up in older versions of the index (index-v1.json and index.xml). We'll look into fixing that.

Which client app are you using?

@KazukyAkayashi if you look at the repo metadata, you can see the name is "F-Droid" https://f-droid.org/repo/index-v2.json so it looks like it is a problem with your client app?

If you're thinking about #democracy, consider that less than 30% of the #USA adult population voted for #Trump.

@thomasfricke @signalapp @OpenTechFund @TheAtlantic Lucky OTF is popular with the US Congress because it is quite effective, a majority of both Democrats and Republicans support OTF. After the first attempt to shut down OTF in the first Trump administration, Congress changed the law to require the money to fund #FreeSoftware and to require security audits, as well as requiring that OTF specifically has money dedicated to it.

#OpenTechnologyFund #OTF #Congress #Trump

@thomasfricke @signalapp @OpenTechFund @TheAtlantic this whole case is a clear example for how the US Federal Gov works. Before #OTF, the money went to a proprietary software firm #UltraSurf, which also refused to do security audits. That firm has been paying #KatrinaSwett to lobby for them to get the money away from OTF. https://www.axios.com/2020/06/23/falun-gong-us-agency-global-media

@thomasfricke @signalapp @OpenTechFund @TheAtlantic The good news is that the #Trump administration had such a weak case, they just rescinded the grant termination once it came to court. The court also kept the case open, despite the Trump admin arguing it was moot, until they actually paid #OTF the money they were owed. Now OTF has been paid:

https://storage.courtlistener.com/recap/gov.uscourts.dcd.278630/gov.uscourts.dcd.278630.19.0.pdf

#OpenTechFund #FreeSoftware #OpenTechnologyFund

@fdroidorg here's info on Google's sponsorship of ECIPE

https://corporateeurope.org/en/2021/08/lobby-network-big-techs-web-influence-eu

#Google funds this #EU think tank to put out policy papers saying #DigitalMarketsAct will break their lovely #PlayProtect scare screens, making us all less safe and "it require[s] Google to allow developers to insert links inside their Play Store apps".

https://ecipe.org/publications/eu-dma-undermine-security-mobile-operating-systems/#_ftn13

As I've always said in relation to the #DMA, let @fdroidorg compete on trustworthiness. I'd love to see this think thank include analysis malware rates of #CalyxOS with #FDroid and compare that to #GooglePlay #security

@1br0wn Yes indeed, it would be great to have a community controlled version of #AOSP. The hard part is that Google still is the largest contributor to Android by a large margin. The ROM projects have started to work together, but not enough to get community control. The #CalyxOS team has put quite a bit of effort into trying to get this idea going. The key would be to get companies to switch to a community-controlled version, e.g. Samsung, Xiaomi, Huawei, Oppo, etc.