Hans-Christoph Steiner @eighthave@librem.one

@neil @fdroidorg Thanks, that would be very useful! Shall we just reach out to you via decoded.legal? Or we're reachable at team@f-droid.org

#Apple is supposedly the "privacy company" but apparently those sweet #SurveillanceCapitalism dollars are just too irresistable, so they are expanding their ad business:

https://www.techradar.com/pro/apple-rebrands-part-of-its-ads-business-in-major-expansion

#AppStore #privacy

@KazukyAkayashi that means that Droid-ify is using the index-v1.jar, which has a weak SHA1 signature. They should upgrade to index-v2. We have libraries for apps like Droid-ify to do that with. If I were a user, I'd file an issue to make them aware.

#security #droidify

@KazukyAkayashi Actually I see the bug now: it only shows up in older versions of the index (index-v1.json and index.xml). We'll look into fixing that.

Which client app are you using?

@KazukyAkayashi if you look at the repo metadata, you can see the name is "F-Droid" https://f-droid.org/repo/index-v2.json so it looks like it is a problem with your client app?

If you're thinking about #democracy, consider that less than 30% of the #USA adult population voted for #Trump.