The fact that #FOSDEM is free to attend is also crazy. It makes the overall vibe different from other conferences. Sure you have to pay for travel and accommodation but if you have the money spare it's absolutely worth it especially if you want to meet specific people.
I've been four times, although only twice paid for by my employer at the time (one of the self-funded ones I travelled on my motorbike: 120 miles in the UK then about the same on Europe mainland to Brussels. Loved the experience)
There's nothing like #FOSDEM. Maybe if you're in a particular community that doesn't have a devroom so doesn't attract so many people it's not the same but finding people you know face to face and making new contacts is so valuable. But there's something for every open source developer.
Talk highlight? I've got to go with @edent's on the UK COVID tracing app. Even if you're not UK based it was a lesson in how government works and dealing with the abuse on Twitter. Superbly presented too.
The first time I went to FOSDEM, I was constantly explaining what F-Droid was to people who never heard of it. I was introducing it and promoting it.
Second FOSDEM, people said "oh yeah, I heard of it, what does it do?"
Third FOSDEM, people said "I'm a user!"
Fourth FOSDEM, I listened to people tell other people what F-Droid is, and heard groups of people talking about it as the app store that everyone in the group had on their phone.
It has been quite a ride!
"Across Canada and the U.S., a growing number of shuttered #golf courses are being rewilded.
"At least four courses in California, and a handful of others in the U.S., U.K. and Australia, have been bought by non-profits, cities or land trusts and turned into #nature preserves or #parks in recent years, leading to an increase in #wildlife sightings, plant species and tree cover."
Copyright law affects everything we do on the internet. So why do some lawmakers and powerful companies still think they can write new copyright law behind closed doors, with ordinary internet users on the outside? https://www.eff.org/deeplinks/2025/01/dont-make-copyright-law-smoke-filled-rooms
We want to draw attention to one of the new Administration's Executive Orders that directly impacts the freedom tools that people around the world depend on to fight censorship, and protect their security and anonymity.
https://www.eff.org/deeplinks/2025/01/executive-order-state-department-sideswipes-freedom-tools-threatens-censorship
Major internet freedom, censorship circumvention, and encryption tools made by groups like Tor Project, Guardian Project, and OONI have been severely impacted by Trump’s State Department executive order freezing foreign aid https://www.eff.org/deeplinks/2025/01/executive-order-state-department-sideswipes-freedom-tools-threatens-censorship
What can Open Source do for Europe?
Open source is the basis for Europe’s critical digital infrastructure, from public services to cybersecurity. To keep it reliable and secure, we need sustainable support and long-term investments. Our CEO Adriana Groh will speak on a high-level panel at the EU Open Source Policy Summit about how Germany made the significant strides by building an organization like the Sovereign Tech Agency to strengthen the open source ecosystem in the public interest.
The Debian Publicity Team will no longer post on X/Twitter. We took this decision since we feel X doesn't reflect Debian shared values as stated in our social contract, code of conduct and diversity statement. X evolved into a place where people we care about don't feel safe. You are very much invited to follow us on https://bits.debian.org , on https://micronews.debian.org/ , or any media as listed on https://wiki.debian.org/Teams/Publicity/otherSN #debian
We have one nomination for Community Council and we're extending the feedback period.
Want to get involved?
Do read: https://f-droid.org/2025/01/27/community-council-nominations-feedback.html
We've signed the open letter to the @EUCommission calling for strong enforcement of the #DMA.
The EU must act decisively to create opportunities, protect innovation and increase consumer choice.
https://appfairness.org/the-digital-markets-act-europes-digital-competitiveness-at-stake/
@rene_mobile is there anything you could add here? It would be quite useful to have these questions clarified so we can make solid Python implementations as used in projects like Androguard, F-Droid, etc.
The success of the free software Android ecosystem relies on contributors like you. Interested in funding to maintain F-Droid or related projects? Let us help you apply to https://nlnet.nl/funding.html, https://prototypefund.de/en/, https://www.sovereign.tech/programs, or https://grayarea.org/initiative/cultural-memory-lab/. We can also mentor you during the grant process to help navigate non-profit funding. please reach out here or via email hans@guardianproject.info
Seven new projects have been selected to contribute to the three NGI Pilots. IzzyOnDroid and OWASP blint will join forces with NGI Mobifree which works on a more ethical mobile ecosystem. Nuxt, Flohmarkt & Open Banking Gateway will work on integrations with Taler, the privacy-preserving digital payment system. And NGI Fediversity - the effort to create a hosting stack in-a-box - will be joined by Drupal & Source-based Nextcloud + Onlyoffice.
https://nlnet.nl/news/2025/20250122-project-selection-pilots.html
#NGI #FOSS
So what is the Android team's intention? Should v3.1-only APKs be considered valid? Or not? My guess is they should be not considered valid since the Android team has explicitly marked that kind of signature as invalid since apksigner v30.0.0 (besides v33). Are there any plans to unified the code that verifies APK signatures?
#Android #AndroidSDK #APK #apksigner
2/2
Interesting bug in #apksigner reported to @fdroidorg: an APK with only a v3.1 signature was only considered valid by v33. <33 error out with "APK Signature Scheme v2 signature 0 indicates the APK is signed using APK Signature Scheme v3 but no such signature was found." >33 error out with "The APK contains a v3.1 signing block without a v3.0 base block". Android uses its own verify code and treats it as valid. https://gitlab.com/fdroid/fdroidserver/-/issues/1253
1/2
fdroidserver v2.3.5 was released to fix issues with `AllowedAPKSigningKeys` when used in specific configurations. More details in the changelog: https://gitlab.com/fdroid/fdroidserver/-/blob/2.3.5/CHANGELOG.md#235---2025-01-20 #FDroid
Michiel Leenaars (our director of strategy) speaks at #FOSDEM about Europe's ambition to increase its digital sovereignty in relation to the #NextGenerationInternet. Despite its contribution to tech sovereignty with over 1300 Free and Open technologies supported, so far #NGI is not in the EU's future plans. Michiel addresses the question: What should our new EU Commissioner for Tech Sovereignty be working on for the next 5 years from the the vantage point of NGI?
https://fosdem.org/2025/schedule/event/fosdem-2025-6508-next-generation-internet-2025-where-next-/
#FOSS