Guardian Project @guardianproject@librem.one

@Utgardloki@norden.social @fdroidorg@mastodon.technology F-Droid is mainly focused on free ROMs where it is built in, like CalyxOS, Replicant, Lineage-for-MicoG, etc. As long as the source is free, F-Droid will never be blocked. As for Google devices, F-Droid has never been allowed in Google Play. And #Google actually consults us when they make breaking changes to third party app stores in their version of AOSP.

US Federal Court of Appeals rules #NSA's bulk collection of phone records was illegal: https://www.msn.com/en-us/news/us/appeals-court-rules-nsas-bulk-phone-data-collection-illegal/ar-BB18E7qE

new in-depth analysis of #GoogleApple #ContactTracing apps: "[The #Google part]... seems to call home every ~20 minutes and shares the handset IMEI, SIM serial, phone number, email address and WiFi MAC address and lots of still-to-be-decoded data with Google. (Presumably more detailed app telemetry.)" https://www.scss.tcd.ie/Doug.Leith/pubs/contact_tracing_app_traffic.pdf

The governments and organizations that built their #COVID19 #ContactTracing apps on #Google/Apple Bluetooth tech are now waking up to the fact that Google requires sending them a constant stream of location data in order to use that API https://www.nytimes.com/2020/07/20/technology/google-covid-tracker-app.html

@gradle now offers complete verification of all the artifacts it downloads and uses, as of v6.2. gradle-witness and others were always limited to a small subset. It is time to switch to the built-in verification: https://docs.gradle.org/current/userguide/dependency_verification.html

Proprietary software companies and anti-end-to-end-crypto politicians are working to shutdown #OpenTechFund, the #FreeSoftware org who funded #LetsEncrypt, #CertBot, #TorProject, #NoScript, TLS ESNI/ECH, #DNSPrivacy, #ReproducibleBuilds, #Wireguard, #DeltaChat, #OpenKeychain, #pypi, #GuardianProject, #Signal Please sign to help stop it: https://saveinternetfreedom.tech

@fdroidorg@mastodon.technology @torproject @signalapp@mastodon.social here's more backstory https://www.vice.com/en_us/article/935k5p/open-technology-fund-ceo-resigns

@kromonos @fdroidorg@mastodon.technology @torproject @signalapp@mastodon.social looks like the site was put up quickly somewhere, this is happening right now. It also requires Javascript.

Back in 2011, @eighthave and @n8fr8 had a crazy idea to turn #Android SQLite guts into a standalone wrapper for #SQLCipher, funded by #USGovt #InternetFreedom money. #Zetetic made it a well-engineered product. Latest user: German gov's Corona Warn App. Technical projects with high risk of failure, without paths to massive profits rarely get developed in the private sector. This project highlights mixing public grants and private enterprise to deliver security and privacy in essential software.

#Google will require #Android App Bundles for new apps in Play, thereby forcing developers to give Google their app's private signing key. This further centralizes the ecosystem and strengthens their #monopoly by making it harder to publish outside of Play https://www.xda-developers.com/google-play-billing-v3-app-bundle-requirement-2021/

#tracking users and usage is an essential element of data analytics, so what exactly is tracking? Here is our first attempt at an overarching definition:
https://guardianproject.info/2020/05/20/on-the-classification-of-tracking/ #TrackingTheTrackers #CleanInsights