Show more

The US data broker Bazze secretly obtains location and identity data about a hundred million people via smartphone apps, digital advertising and consumer records and sells it to the US military.

NSA-like global mass surveillance, but based on commercial data.

Forbes has now a report about it:
forbes.com/sites/sarahemerson/

Show thread

The and other actions against app stores are based on the idea that an app store companies should not "self-preference" their own apps or services. This makes sense to a certain degree, especially when thinking about business. Ethical reasons must also be considered. preferences apps based on and Anti-Features, which we as a community define. We should always be allowed to preference apps that follow standards of .

has a beta that makes it possible to chat without sharing your phone number with the others. This is an important development for privacy in use cases like journalists and activists that have to privately interact with people they do not know. Careful about using a public username for Signal, it could open you up to spam and targeted attacks like Pegasus.

social.librem.one/web/timeline

How Allowing #Copyright On #AI-Generated Works Could Destroy Creative Industries - techdirt.com/2024/02/20/how-al "it is not in the interest of artists to allow copyright on AI-generated works, whatever Big Copyright might have them believe."

One down, three to go!

#Tiktok: we're not a #gatekeeper and this will expose our shady #surveillance business to the world mimimimi

Court of Justice: yeah whatever, no. 👏

#ECJ #DMA #digitalmarketsact #Competition
curia.europa.eu/jcms/upload/do

Thanks @eighthave! IMHO by running an F-Droid repo (whether it builds from source or just offers binaries) intended to be used by others, one accepts responsibility. So one should take the best possible measures to make it as safe and as transparent as possible. I try my best here, and I won't stop where I'm standing now – but hopefully improve it even more. 🤞 @fdroidorg

Yet another piece of evidence to support 's idea that is inevitable: and financial firms are funding without an equity stake. These are supposed to be the true capitalists but are funding a system of "From each according to his ability, to each according to his needs". Why? Because it works better than what capitalism can provide. I have a lot of problems with Marx but his economics is looking ever more solid techcrunch.com/2024/02/15/sequ

⚠️ Putting a price tag on the reject button means selling our fundamental rights. Together with over 20 NGOs, we warn of a fatal loophole in EU privacy laws if "pay or okay" tactics are allowed. The European Data Protection Board's opinion will shape the future of data protection. techcrunch.com/2024/02/15/no-c

One concrete example of the damage that companies like and are doing to the mobile ecosystems is clear to see with media codec libraries. Right now, malware companies like have maintained zero-click exploits in both and for years. This is mostly via media exploits. iOS and Android have obscene profit margins, meaning both companies have plenty of cash for improving things. Yet where is the big outflow for fixing media codecs?

We have been running an -compatible repository since 2012! Since then, the free software ecosystem on Android has blossomed, meaning @fdroidorg can be properly strict about . A couple of our apps still have a couple blobs that are requirements. F-Droid no longer includes any third party repos by default, that means our repo is no longer there by default. It is still easy and safe to add it! Read on for more info:

guardianproject.info/2024/02/2

#PeerTube, born in 2017, is more than an alternative; it's about freedom and user-friendly options. Its impact spans institutions, educators, content creators, independent media, and citizens worldwide. With over 1,000 instances, hosting nearly 1 million videos and 567 million views, PeerTube achieved this with less than 0.0022% of YouTube's ad revenues in 2022.
ngi.eu/news/2023/30/11/ngi-for
Direct link to Video:
tube.network.europa.eu/w/7dBJN
#NGI #ngi4eu #PeerTube #pouhiou

I wish the team would follow repository best practices and stop silently reissuing binary releases under the same name/version. does not allow this, for example. The transparency log shows the newest violation: two version of sources-34_r01.zip with the file name, version code, and metadata.

gitlab.com/fdroid/android-sdk-

Good thing the #Apple App Store is secure, it would be a shame if the #DigitalMarketsAct allowed alternative platforms to set up shop and start pushing fake software to #iOS devices...

Oh wait 👉 arstechnica.com/security/2024/

This week in F-Droid (TWIF) was just published again!

We explain the "unattended upgrades for everyone" in 1.19.0 of our client in more depth.

Additionally:
- we talk about Acode editor - Android code editor, MRepo, PiliPala, SIYuan, K-9 Mail, Rocket.Chat and SimpleX Chat.
- big apps like Gao&Blaze, TuxPaint and Katawa Shoujo: Re-Engineered got their own paragraph
- the spring-cleaning continues
- our recap of FOSDEM is also linked

f-droid.org/2024/02/08/twif.ht

#FDroid

Totally impressed by the level of this blog post on de-obfuscation of an advanced packer

blog.quarkslab.com/dji-the-art

I hadn't ever seen the trick about "stealing bytecode" from methods from the ART class verification stage.

#Android #packer #secneo

"To restore Earth’s forests and mitigate climate change, states should devolve management rights to the communities in these land parcels and grant them secure tenure."

#rewilding #restoration #forests #climatechange

rewildingmag.com/the-best-way-

Big thanks to Kai-Chung Yan, Komal Sukhani (couldn't find them in the Fediverse), @eighthave and everyone else involved for packaging the open source parts of the Android SDK for Debian! 💙
With this I managed to revive an old Android app of mine that stopped working several years ago due to server-side changes.
#AndroidSDK #OpenSource #AndroidApp

git fsck makes it much harder to attack a git repo, but it seems that the normal git workflow does not enable it by default. In it is enabled for all fetches in our config:
f-droid.org/docs/FAQ_-_App_Dev

But I still can't find a clear answer about what checks does by default. Anyone know?

Show more
image/svg+xml Librem Chat image/svg+xml