@Utgardloki@norden.social @fdroidorg@mastodon.technology F-Droid is mainly focused on free ROMs where it is built in, like CalyxOS, Replicant, Lineage-for-MicoG, etc. As long as the source is free, F-Droid will never be blocked. As for Google devices, F-Droid has never been allowed in Google Play. And #Google actually consults us when they make breaking changes to third party app stores in their version of AOSP.
US Federal Court of Appeals rules #NSA's bulk collection of phone records was illegal: https://www.msn.com/en-us/news/us/appeals-court-rules-nsas-bulk-phone-data-collection-illegal/ar-BB18E7qE
On the occassion of german reports of exploits against #whatsapp Web ... you can use Delta Chat Desktop app without any dependency on a mobile phone. And a second independent security review is currently ongoing. https://get.delta.chat
Still hosting data at a US firm and worried about the recent ECJ ruling that deems those incompatible with EU #privacy law? There is NO GRACE period! In a lawsuit you have to show you took timely action. Here's help from NOYB on what to do:
https://noyb.eu/en/next-steps-eu-companies-faqs
new in-depth analysis of #GoogleApple #ContactTracing apps: "[The #Google part]... seems to call home every ~20 minutes and shares the handset IMEI, SIM serial, phone number, email address and WiFi MAC address and lots of still-to-be-decoded data with Google. (Presumably more detailed app telemetry.)" https://www.scss.tcd.ie/Doug.Leith/pubs/contact_tracing_app_traffic.pdf
The governments and organizations that built their #COVID19 #ContactTracing apps on #Google/Apple Bluetooth tech are now waking up to the fact that Google requires sending them a constant stream of location data in order to use that API https://www.nytimes.com/2020/07/20/technology/google-covid-tracker-app.html
@gradle now offers complete verification of all the artifacts it downloads and uses, as of v6.2. gradle-witness and others were always limited to a small subset. It is time to switch to the built-in verification: https://docs.gradle.org/current/userguide/dependency_verification.html
Proprietary software companies and anti-end-to-end-crypto politicians are working to shutdown #OpenTechFund, the #FreeSoftware org who funded #LetsEncrypt, #CertBot, #TorProject, #NoScript, TLS ESNI/ECH, #DNSPrivacy, #ReproducibleBuilds, #Wireguard, #DeltaChat, #OpenKeychain, #pypi, #GuardianProject, #Signal Please sign to help stop it: https://saveinternetfreedom.tech
@fdroidorg@mastodon.technology @torproject @signalapp@mastodon.social here's more backstory https://www.vice.com/en_us/article/935k5p/open-technology-fund-ceo-resigns
@kromonos @fdroidorg@mastodon.technology @torproject @signalapp@mastodon.social looks like the site was put up quickly somewhere, this is happening right now. It also requires Javascript.
Back in 2011, @eighthave and @n8fr8 had a crazy idea to turn #Android SQLite guts into a standalone wrapper for #SQLCipher, funded by #USGovt #InternetFreedom money. #Zetetic made it a well-engineered product. Latest user: German gov's Corona Warn App. Technical projects with high risk of failure, without paths to massive profits rarely get developed in the private sector. This project highlights mixing public grants and private enterprise to deliver security and privacy in essential software.
It is proven!
Android apps can be built using only standard packages from Debian Buster!
https://gitlab.com/Matrixcoffee/hello-world-debian-android
"This project helps to document the Android tools in Debian by providing an example build, and can serve as a base template for new projects for those who would like to develop Android apps using only truly Free and Open Source software."
#Google will require #Android App Bundles for new apps in Play, thereby forcing developers to give Google their app's private signing key. This further centralizes the ecosystem and strengthens their #monopoly by making it harder to publish outside of Play https://www.xda-developers.com/google-play-billing-v3-app-bundle-requirement-2021/
#tracking users and usage is an essential element of data analytics, so what exactly is tracking? Here is our first attempt at an overarching definition:
https://guardianproject.info/2020/05/20/on-the-classification-of-tracking/ #TrackingTheTrackers #CleanInsights
Am. 7. Mai hat @IzzyOnDroid einen Vortrag privatsphärefreundlichen Umgang mit #Android für unsere Schwestergruppe in #Bayreuth gehalten. Inzwischen ist auch die Aufzeichnung via #Peertube verfügbar. Viel Spaß!
https://libre.video/videos/watch/37c7dc78-6058-4e3f-bb47-73f6b9c2c9b3
Often the most surveilled work places, whether in a warehouse, a call centre or as a delivery driver - are those where people’s job security and rights are the most precarious and these tools and data, can be used as a tool to target and sanction.
https://privacyinternational.org/case-study/3840/it-allows-us-work-dignity https://nitter.net/privacyint/status/1263728048026710017/photo/1
Debian welcomes our 2020 Google Summer of Code #GSOC interns: https://bits.debian.org/2020/05/welcome-gsoc2020-interns.html
Its great to see the current explosion of public #Jitsi Meet. To help choose which one works for you, we set up a test project "jitsi-monitor" to gather data on public #JitsiMeet instances daily:
* config including STUN, analytics, etc.
* TLS setup
* TCP traceroute
* what else?
This should run locally for choosing the closest instance. Our results are in basic HTML format. This can be used to make Javascript UIs. The full JSON, source, etc. are available at
https://guardianproject.gitlab.io/jitsi-monitor/
@csolisr I added that app. As for opening it up for editing, I thought it was. I guess I don't know how to do that with GitLab wikis. Tips welcome.
We have started a public wiki page to gather all the gov/etc #Coronavirus #Android apps, we are also monitoring what is in those apps. Please let us know if any are missing, or direct edit if you have access.
https://gitlab.com/trackingthetrackers/wiki/-/wikis/Coronavirus-apps
People, apps and code you can trust