Show more
Guardian Project  

If you want to try ECH (Encrypted ClientHello), the next generation of , you can use nightlies and our test fork of that forces an ECH connection to a mirror of f-droid.org hosted on Cloudflare: f-droid.org/packages/ie.defo.e

0
Guardian Project  

If you are a developer who has posted on public mailing lists, watch out for spearphishing replies to your posts guardianproject.info/2022/02/2

0
Guardian Project  

For anyone looking to run a full fledged circumvention system, we're working to bring 's proven software to any context, starting with github.com/greatfire/envoy

0
Guardian Project  

User accounts are so often a method of tracking users, yet they are not a requirement for running most internet services. all provide shining examples of working without accounts. f-droid.org/2022/02/28/no-user

0
Guardian Project  

"EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impact Google's, Amazon's and Microsoft's online advertising businesses."

iccl.ie/news/gdpr-enforcer-rul

1
Guardian Project  

regional court finds embedding Google Fonts in a website violates , "legitimate interest" did not apply since the fonts can easily be directly integrated into their website, thereby avoiding sending IP addresses to .

thehackernews.com/2022/01/germ

1
Guardian Project  

Some of the team will be at 113 in Vienna, it'll be good to see people in person again!

Registration for (19-24 March 2022) is now open. Sign up to participate in and read all the details about the first-ever hybrid IETF meeting: ietf.org/blog/113-registration

0
Guardian Project boosted
Electronic Frontier Foundation  

Like many problems with targeted ads, both Naviance, the platform, and college officials who use the platform to target applicants by race, are at fault. Children aren't products. themarkup.org/machine-learning

0
Guardian Project  

The US State Dept's "Global Internet Freedom" funds ( and more) now require : section 7050, "Funds... may only be made available to support open-source technologies that undergo comprehensive security audits...".

congress.gov/bill/117th-congre

0
Guardian Project boosted
Hans-Christoph Steiner  

The Tools Team now has a blog, including news about packaging sdkmanager and related issues android-tools-team.pages.debia

0
Guardian Project  

With , it is now possible to get all updates from official HTTPS sources. In combination with other work from the apt developers, this improves privacy and provides backup security guardianproject.info/2021/12/0

0
Guardian Project  

The FBI produced this nice chart comparing what kinds of privacy leaks the various messaging apps have.

rollingstone.com/politics/poli

1+
Guardian Project  

Our first build of Conscrypt which includes the next version of known as (Encrypted ClientHello) is now available for Android and Java:

implementation 'info.guardianproject.conscrypt:conscrypt-android:2.6.alpha1638179154.job1828169525'
github.com/google/conscrypt/is

0
Guardian Project boosted
Hans-Christoph Steiner  

Yet another of the many ways that breaks the open : connecting without a User Agent gives 403 Forbidden with an obscure "error code 1010". My test suite works fine on all the other sites, only Cloudflare does this.

0
Guardian Project  

One of the hazards of is that a deployment could end up leaking as much information as a non-ECH TLS connection if the ECH Config in DNS is only associated with a given domain. blog.cloudflare.com/handshake-

0
Guardian Project  

apps can track users based on their wallpaper: lwn.net/Articles/873921/ fingerprintjs.com/blog/how-and

0
Guardian Project  

is leading the charge to deliver a truly mobile device, it is also . Since it is based on , you can port it to lots of devices, even if they do not support a locked bootloader.

1+
Guardian Project boosted
Hans-Christoph Steiner  

created an ecosystem where the software available there is reviewed and trusted, so the system can prioritize flexibility over security. In Play, there are many apps we feel forced to use, despite knowing they are unethical or are tracking us. Google responds by locking down to reduce data leaks, which also reduces the system's flexibility. puts the user in control so we can build user-friendly systems without being forced into bad decisions.

1+
Guardian Project boosted
Hans-Christoph Steiner  

I'd love to see data on what verified boot actually stops. The ideal malware implants itself at the lowest level possible. Is there good public data on these kinds of exploits on etc? Does standard spyware do that? Writing to /system requires a root exploit, lots of malware never gets root. How often there are vulns in itself. Here's a real world full of verified boot:
threatpost.com/multiple-vulner

0
Guardian Project boosted
Hans-Christoph Steiner  

Does anyone know how to query the system for information about Trichrome Libraries chromium.googlesource.com/chro? They seem to be installed as APKs, but the regular way of querying for app metadata does not work. For example, is there a separate concept of "Version Code" for Trichrome libraries?

0
Show more

calyxos

2
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml