@micahflee For those of us who prefer avoiding Birdsite / have fully disable JS:
We want to add the official #Tor onion service for f-droid.org as an official mirror, so that clients will automatically use it. Please test by sharing the repo link to #FDroid client then add it as a mirror:
https://gitlab.com/fdroid/admin/-/issues/12#note_1184095205
This should prompt to add it as a mirror, which is safe since the keys need to match. Click cancel if it offers to add a new repo.
Thanks to @janboehm who is promoting the #FreeSoftware #Mastodon and the #Fediverse in all the recent episodes of the German public TV show #zdfmagazin Royal
If you want to try ECH (Encrypted ClientHello), the next generation of #TLS, you can use #Firefox nightlies and our test fork of #FDroid that forces an ECH connection to a mirror of f-droid.org hosted on Cloudflare: https://f-droid.org/packages/ie.defo.ech_apps/
If you are a developer who has posted on public mailing lists, watch out for spearphishing replies to your posts https://guardianproject.info/2022/02/23/spearphishing-for-developers/
For anyone looking to run a full fledged circumvention system, we're working to bring #Greatfire's proven software to any context, starting with https://github.com/greatfire/envoy
User accounts are so often a method of tracking users, yet they are not a requirement for running most internet services. #FDroid #Jitsi #CleanInsights #Wikipedia #Briar #FirefoxFocus all provide shining examples of working without accounts. https://f-droid.org/2022/02/28/no-user-accounts-by-design.html
"EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impact Google's, Amazon's and Microsoft's online advertising businesses."
https://www.iccl.ie/news/gdpr-enforcer-rules-that-iab-europes-consent-popups-are-unlawful/
#Munich regional court finds embedding Google Fonts in a website violates #GDPR, "legitimate interest" did not apply since the fonts can easily be directly integrated into their website, thereby avoiding sending IP addresses to #Google.
https://thehackernews.com/2022/01/german-court-rules-websites-embedding.html
Some of the #GuardianProject team will be at #IETF 113 in Vienna, it'll be good to see people in person again!
Registration for #IETF113 (19-24 March 2022) is now open. Sign up to participate in and read all the details about the first-ever hybrid IETF meeting: https://ietf.org/blog/113-registration-open/
Like many problems with targeted ads, both Naviance, the platform, and college officials who use the platform to target applicants by race, are at fault. Children aren't products. https://themarkup.org/machine-learning/2022/01/11/this-private-equity-firm-is-amassing-companies-that-collect-data-on-americas-children
The US State Dept's "Global Internet Freedom" funds (#OpenTechFund #StateDRL #USAGM and more) now require #OpenSource: section 7050, "Funds... may only be made available to support open-source technologies that undergo comprehensive security audits...".
The #Debian #Android Tools Team now has a blog, including news about packaging #Gradle #Kotlin sdkmanager and related #FreeSoftware issues https://android-tools-team.pages.debian.net/blog/
With #Debian, it is now possible to get all updates from official HTTPS sources. In combination with other work from the apt developers, this improves privacy and provides backup security https://guardianproject.info/2021/12/08/debian-over-https/
The FBI produced this nice chart comparing what kinds of privacy leaks the various messaging apps have.
Our first build of Conscrypt which includes the next version of #TLS known as #ECH (Encrypted ClientHello) is now available for Android and Java:
implementation 'info.guardianproject.conscrypt:conscrypt-android:2.6.alpha1638179154.job1828169525'
https://github.com/google/conscrypt/issues/730
Yet another of the many ways that #Cloudflare breaks the open #internet: connecting without a User Agent gives 403 Forbidden with an obscure "error code 1010". My #TLS #ECH test suite works fine on all the other sites, only Cloudflare does this.
One of the hazards of #TLS #ECH is that a deployment could end up leaking as much information as a non-ECH TLS connection if the ECH Config in DNS is only associated with a given domain. https://blog.cloudflare.com/handshake-encryption-endgame-an-ech-update/#focusing-on-deployability
People, apps and code you can trust