keverets @keverets@librem.one

Bill C-2 lets Canadian cops demand users' info without a warrant—and it paves the way for that info to go to U.S. government agencies. https://www.eff.org/deeplinks/2025/07/canadas-bill-c-2-opens-floodgates-us-surveillance

The EU is making a very bad mistake here.

The EU is developing an app for age verification that can be used by many other applications as a legal way of ensuring that a user is at least 18 before accessing some protected content.

The problem is here: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui?tab=readme-ov-file#disclaimer

The current release provides only basic functionality, with several key features to be introduced in future versions, including:

App and device verification based on Google Play Integrity API and Apple App Attestation
Additional issuance methods beyond the currently implemented eID based method.

What does it mean that it relies on the Google Play Integrity API?

Put simply, that:

Any Android device not certified by Google will not be able to run the app. Do you use /e/OS (which is a European fork of Android btw), GrapheneOS, LineageOS or any other open-source fork of Android? Sorry, no age verification for you, which will mean that you’ll probably be locked out of many applications in the future. We often forget it, but, even though developed by Google, the core of Android (AOSP) is open-source and anyone can fork it. Google lately is already trying to attack that core hard enough to turn Android into a fully closed-source operating system exclusively controlled by them. The EU is just doing them a favour apparently.
The Google Play Integrity API relies on keys and certificates exclusively owned by Google. Which means that if you use alternative privacy-aware frameworks to the Google Play Services (like microG) you won’t be able to do age verification. Google is already trying hard to force all vendors that install Android on their devices to get a certification from them only if they also pre-install Google apps and the Google Play Services (see the Android Certified program https://www.android.com/certified/). The EU in the past opposed such plans because they clearly violate all the possible antitrust rules on the face of the earth. But, by piggybacking on mandatory Google Play Services for age verification, it seems that it’s just doing a U-turn and doing Google another favour.

In other words, EU representatives have (rightfully) talked a lot over the past years about digital sovereignty, technological independence from American tech giants and supporting open-source.

And then, when tasked to build an institutional app for age verification, what do they do?

Well, they entirely delegate the process to an American tech company that they pledged to decouple us from, and they play in their interests by putting another nail in the AOSP’s coffin.

Luckily the age verification app is still in alpha state and it’ll still take time to be deployed, and it’s also open-source.

So please, if you have a Github account, add a reaction or a comment to the issue opened by @SylvieLorxu on the project of the app to boost its visibility: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/10

And if you have contacts with a EU representative don’t hesitate to write to them and express these implementation concerns.

​​

My @torontostar column: Bike Share Toronto is booming. We’re smashing ridership records.

But it’s not enough. The growth still leaves us nowhere close to bike share ridership in Montreal.

With better balancing and more infrastructure, I think we can beat them.

https://www.thestar.com/opinion/contributors/toronto-s-bike-share-is-booming-but-the-city-needs-to-do-one-thing-to/article_3f077952-c09f-4071-bf95-e9b7a0ae7575.html

🚨 Meta announced today that it will introduce ads on WhatsApp, which will be based on personal data from Facebook and Instagram. This move further consolidates Meta's social networking monopoly. EU law was actually supposed to prevent this.

https://noyb.eu/en/whatsapp-getting-ads-using-personal-data-instagram-and-facebook

Use Signal. We promise, no AI clutter, and no surveillance ads, whatever the rest of the industry does. <3

Listen up Mastodonians, because this is important:

Right now we have a unique chance to rise up and hit back against Zuckerberg and Musk. Because italian filmmaker @_elena and her friends have made an OUTSTANDING film which explains why people should quit the fascist social networks and come join us in the free fediverse.

Hit the fascists where it hurts — make this go viral by watching it and liking it on YouTube, then hit the share button and share it everywhere!

https://www.youtube.com/watch?v=YRJHIJy5Nno

Nintendo Switch 2? Galaxy S25 Edge?

Around here, we're most excited about the MNT Reform laptop that, after much anticipation, just arrived at our doorstep.

Among many repair-friendly features, this laptop uses standardized 18650 batteries, which makes finding replacements incredibly easy. Opening it up to swap them out is easy, too.

Shout out to @mntmn, @theawesomerandomness, @liaizon, @holo_memory, @plom, @bnys, Tina the dog, and everyone else who put together this incredible product!

@2legged no. Apps are a cancer. https://blog.codinghorror.com/app-pocalypse-now

Good tutorial in French explaining the features and benefits of Hetzner's Storage Share service, a cloud storage solution that integrates with Nextcloud, a popular open-source file management platform.

From just €4.29 per month, you can get your own Nextcloud instance as an alternative to Google, Microsoft, etc. It comes with 1 TB of storage, unlimited users and is hosted in Europe.

It's not free, but neither are the US competitors — it's actually cheaper than Google One (10€) or Microsoft 365 (13€).

You don't need any IT skills to install it; just create an account, pay and start using it. 🙂

You can do it only for yourself or offer storage to family, friends and your community too.

Article: https://next.ink/4687/on-a-teste-storage-share-instance-nextcloud-dhetzner-a-prix-serre/

Hetzner Storage Share website: https://www.hetzner.com/storage/storage-share/

#nextcloud #hetzner #cloud #EuropeanAlternatives #BuyEuropean

Guix's integration with Shepherd as its init system is one of its best features: it allows for incredibly clean integration between home/system service definition and the generation/maintenance of daemon management.

So I'm very sad to hear that Gnome will be gaining tighter SystemD integration, and the attitude is primarily "Well, you should use SystemD, and if you don't, prepared for it to be hard" https://blogs.gnome.org/adrianvovk/2025/06/10/gnome-systemd-dependencies/

I guess my days as a Gnome user are numbered :(

At the end of this month Microsoft will be ending its Bing map services https://community.openstreetmap.org/t/discontinued-services-bing-maps-rest-services/117308 This has be a key bit of infrastructure #OpenStreetMap has relied on for nearly the last 15 years and was a significant boost to contributions back then.

Unluckily, while the imagery will continue to be available for the web editor iD for a while, independent editor developers will not really have a choice other than to end access.

Sorry for the bad news.

You might want to fine-tune your notification settings:

“Apple Gave Governments Data on Thousands of Push Notifications” - https://www.404media.co/apple-gave-governments-data-on-thousands-of-push-notifications/

Twitter's new encrypted DM system stores your private key material on Twitter-owned services, protected with nothing more than a 4-digit PIN. If hostile, or if legally compelled to, Twitter could easily decrypt all your messages. It's also MITMable and doesn't secure metadata. Use Signal.

https://mjg59.dreamwidth.org/71646.html

Good morning Fedi friends! This is a routine reminder that #YunoHost is still doing a fundraising drive to cover its operating costs for 2025. They’re super close to the finish line and need a little push: https://yunohost.org/donate.en.html

@yunohost volunteers are like real life superheroes — working tirelessly to empower anyone to self-host and achieve #digitalsovereignty.

If you could afford to donate to their efforts, any euro / dollar / yen counts.

Thank you! 🙏

Today in #BoringDystopia

Without full PCAP + emulated router profiles, this would've stayed hidden. Check your ASUS routers for SSH on TCP/53282 NOW.

Technical deep-dive: https://www.labs.greynoise.io//grimoire/2025-03-24-ayysshush/

📊 Executive summary: https://www.greynoise.io/blog/stealthy-backdoor-campaign-affecting-asus-routers
4/4

🚨 BREAKING: GreyNoise discovered a sophisticated backdoor campaign compromising ~9,000 ASUS routers worldwide. Unlike typical malware attacks, this operation uses the router's own legitimate features to create persistent backdoors that survive firmware updates and reboots.
1/4

The End (of Windows 10) is nigh!

On 14 October, #Microsoft will end support for #Win10.

This will turn hundreds of millions of computers that cannot upgrade to #Win11 into security risks and #eWaste.

Yours may be one of them!

But what if you could make your current one fast and secure again?

Learn more: https://endof10.org/press

Saved a device from the bin? Tell the world with the hashtag: #EndOf10

#Linux #GNU #GNUlinux #FreeSoftware #OpenSource #FOSS #FLOSS #Windows