:fdroid: Happy #FDroidFriday! What apps have you found useful this week?
📸 A lot of people like to take #photos and share them with specific family or friends over time. If you want to do this without Big Tech in the way, check out #Circles.
It's still technically in Beta, but works great. It runs entirely over the #Matrix protocol and uses encrypted rooms to manage your sharing and commenting. You can use their homeserver, or your own existing one.
Our 3.3 release is now available both on F-Droid and Google Play! What you'll find:
🚙 Android Auto improvements
⏭️ Next chapter button in notification
💅 UI polishing (including sort dialog)
➕ and more smaller fixes & improvements
ℹ️ Public service Announcement: we've moved the 'Refresh' button to the overflow menu (behind the three dots). You can also still pull to refresh.
Hi @AntennaPod people, thanks for all your hard work! Very happy with your FLOSS app. IMHO the best podcast available on Android. Looking forward updating to the latest version. Keep up the good work!
Three years ago, #FDroid had a similar kind of attempt as the #xz#backdoor. A new contributor submitted a merge request to improve the search, which was oft requested but the maintainers hadn’t found time to work on. There was also pressure from other random accounts to merge it. In the end, it became clear that it added a #SQLinjection#vuln. In this case, we managed to catch it before it was merged. Since similar tactics were used, I think its relevant now
Steiner wrote this week that the original coder deleted their account as soon as F-Droid’s maintainers attempted to review the code, and that he thinks that the user’s behavior, as well as “all the attention from random new accounts” has led him to believe “it could be a deliberate attempt to insert the vuln.”
This is pretty significant: the first documented case of these tactics being used to insert a vulnerability, apart from xz. So probably the same actors have been trying this on multiple projects.
I hope other maintainers who have experienced similar pressure tactics will come forward, even if they’re not aware of any backdoors. For any project where this has taken place and the code was merged, the code and commit history needs to be audited.
Version 1.20 of @fdroidorg brings some pretty big changes of how repositories are handled:
• official repo is always preferred
• the repo an app comes from is prominently shown
• if an app is available from more than one repo, you can choose where to get it from
• power users can change global repo priorities
@FloraIncognita_DE
Danke für die Aussage zu F-Droid.
Ich kann verstehen, das es Gründe gibt, seine Arbeit nicht als OpenSource zur Verfügung zu stellen.
Aber (und nur um sicher zu gehen): Ihr wisst schon, dass man auch ClosedSource Apps (mit minimalem Aufwand) als (eigenes) #Fdroid-Repo anbieten kann?
Das hat (gegenüber einem "einfachen" Download) lediglich den Vorteil, dass man Updates automatisch einspielen kann.
Our team from @calyxos will be at @fossasia next week! If you are in the area, please drop by our booth to chat with us about #CalyxOS or projects we support for the FOSS community such as #LineageOS, #AuroraStore, #FDroid, and more.
The depressing point is:
I need a VPN app like #NetGuard to block apps which violating my privacy.
I need Kodi and #OpenSource Software to have a seamless integration of two Services in one app.
But one thing is cool. The Rest API of Kodi will allow to steer the TV.
I currently use the #libreelec on a raspi as an Alarmclock in the morning #nodered start online radio.
If everything works there is a plan for may use it with #Moonlight as gamestation.
In the near future I will also create a Videophone for my grandma with #Threemalibre from #Fdroid.
Three years ago, #FDroid had a similar kind of attempt as the #xz#backdoor. A new contributor submitted a merge request to improve the search, which was oft requested but the maintainers hadn't found time to work on. There was also pressure from other random accounts to merge it. In the end, it became clear that it added a #SQLinjection#vuln. In this case, we managed to catch it before it was merged. Since similar tactics were used, I think its relevant now
Well, I have finally installed F-Droid on my Android mobile as I continue to move away from Big Tech. Most of the open source applications I'm using have an official version on the store! Signal seems to be the exception, so any thoughts on Element as a possible replacement please? Obviously, views on other alternatives just as welcome! #fdroid#bigtech#foss#opensource#signal#element#privacy#security
📝 Aggiungere un repository a F-Droid
Come fare per aggiungere un repository ad F-Droid per avere accesso alle applicazioni al di fuori dal repo ufficiale...
Just installed #LineageOS#MicroG on my Galaxy Tab. So far, everything works great and so much better without all the bloatware. I installed #Saber for handwritten notes and I'm happy with it as well.
Are there any #FOSS apps you'd recommend for tablets?
Una lettera della regione Emilia Romagna m'informa che l'analisi del campione* ha dato esito negativo.
*come uomo di mezza età, mi hanno inserito nel programma di screening per la prevenzione del tumore al colon/retto e ogni 2 anni mi chiedono un microscopico scampolo produttivo per cercare tracce di sangue.
Se le trovano, ti fanno una colonoscopia di controllo.
Alla notizia che non devo essere colonoscopizzato, io ho reagito con l'aplomb e la pacatezza che mi contraddistinguono. #Tartapirla
I like ProtonMail, but it's a shame that they provide latest app versions for Android quickly and constantly only via Google Play store – as someone who uses their Github Releases, I'm still locked in with v3.0.17 :sad_cat:
It's not to say they shouldn't, but for all their talk about being anti-Google and anti-big tech (and rightly so!), they still don't provide a libre version, and a stable APK release out of Google Play store
In der #FDroid Version von #Telegram FOSS kann man seine Telefonnummer nicht mehr ändern, wenn man mal die SIM wechselt. Der Anruf/Bestätigungs-SMS kommt einfach nicht. Man ist dann gezwungen die Version aus dem Play Store zu benutzen.
We are happy to announce that DAVx5 4.3.15 is now available (also on #fdroid@fdroidorg).
Great parts have been rewritten to Compose and (will be finalized in 4.3.16)
We've changed how we use various sync types, resulting in much less used system sync quota. This means a much more reliable scheduled background sync. Hope you enjoy the new version! 😀
I'm pretty tired of having to use #GoogleMaps to share locations with people I'm making appointments with.
I've made a little application to convert the sharing links from #OrganicMaps to Google Maps which I open in this example, but there's no need in practice, I just have to share it with whoever I want!
I've also set up https://mapu.retiolus.net, which can be activated in the settings, if needed, to resolve certain short links from Google Maps without going through their servers.
Bullying in Open Source Software Is a Massive Security Vulnerability (www.404media.co)
Unsmart a smart TV (lemmy.sdf.org)
How standardized a lcd panels? Could I replace the controller in a smart TV with one of these HDMI to LCD controllers?...