The #FDroid website has a new banner on top to remind visitors that #Google did not change course and #Android will be locked-down in under 200 days.

[alt43@mastodon.social]

@fdroidorg Done!

[alonely0@mastodon.social]

@tehstu @cy8aer @fdroidorg @marcprux yeah, it's a technical discussion, sorry I assumed more than I should have (it's an xkcd 2501 situation, look it up lol). However, I have to say that relying on GitHub releases is not that bad of a deal with an app store like Obtainium, which streamlines app updates. It's actually a quite secure model since it comes as straight from the developer as it possibly can.

[diaamahmoud97@mastodon.social]

@fdroidorg @marcprux Wow, a crucial warning! ️ It's time to be vigilant and take action to keep Android open and our privacy safe.

[fdroidorg@floss.social]

@Alonely0 @tehstu @cy8aer Note that Obtainium, Aurora and other app stores will have the same issues on 99.9999% of devices if Google goes ahead. Regarding "secure", do read https://f-droid.org/docs/Inclusion_How-To/#reproducible-builds too.

[ttfka_tay0@fosstodon.org]

@fdroidorg @marcprux
How will this effect LineageOS and other android alternatives?

[alonely0@mastodon.social]

@fdroidorg @tehstu @cy8aer of course. It's a battle we fight together regardless of preference for app stores or ROMs. Ty for attaching sources!

[preuk@framapiaf.org]

@fdroidorg @marcprux
Got a quick answer from EU's DMA Team, they might have a standard response due to high demand :

> Dear citizen,
>
> Thank you for contacting us and sharing your concerns regarding the impact of Google’s plans to introduce a developer verification process on Android. We appreciate that you have chosen to contact us, as we welcome feedback from interested parties.
... 1/N

[preuk@framapiaf.org]

> As you may be aware, the Digital Markets Act (‘DMA’) obliges gatekeepers like Google to effectively allow the distribution of apps on their operating system through third party app stores or the web. At the same time, the DMA also permits Google to introduce strictly necessary and proportionate measures to ensure that third-party software apps or app stores do not endanger the integrity of the hardware or operating system or to enable end users to effectively protect security.
... 2/3

[kilgoretrout@fedi.idesmi.eu]

@zetabeta
My phone runs Android, my parents' too.
Google is going to prevent us from installing what we want on devices where we had been able to until now.
Devices that we bought and that will still be perfectly functioning 5 years from now.
Hence why this is a fight worth fighting.
@fdroidorg @marcprux

[fdroidorg@floss.social]

@TTFKA_Tay0 To be fair, they are not alternatives, they use the same code, and are at the mercy of Google when it comes to releasing such code. Otherwise, once installed, Lineage and other Android distributions can give the freedom back to their users to install what they want.

[rpla@masto.es]

@fdroidorg @marcprux
Si china puede hacer un clon de Android, ¿Acaso no puede hacerlo Europa?
¿Para cuando un Linux para dispositivos móviles?
¿hasta cuando seguiremos siendo vasallos de las multinacionales norteamericanas?
¿Para cuando nuestra delcaración de Soberania Digital?

¡Sin Soberania Digital no hay libertad, independencia ni democrácia!

[aka_quant_noir@hcommons.social]

@alandvalonline @fdroidorg

I also wish for this. Linux drivers for legacy phone hardware, a Chromebook level of simplicity for installing or running variant UX's, maybe from a removable card or USB stick... A secure OS like Tails... Siloed apps... I don't want corporate access to any data.
..

[jmjm@mstdn.social]

@fdroidorg @marcprux

unfortunately my country has crashed. Abort, retry, fail?

[apicultor@hachyderm.io]

@fdroidorg
Did you secure your build environment yet? Why must you re-sign everything instead of using signed artifacts from developers?

Until then, #Obtainium.

@marcprux

[fdroidorg@floss.social]

@apicultor Everything we do is transparent and public, eg. https://floss.social/@fdroidorg/116086537617519438

[fisk@little.tinypuppy.dog]

@fdroidorg @marcprux its a good thing actually as the main thing it affects is intimate partner violence stalking and really low hanging fruit malware. you can literally still sideload, you just cant distribute apks anonymously. you can still modify a phone to remove the restriction, just not without the owner noticing, which is the actual point. this is completely out of touch with the reality of the android malware ecosystem, the harm it causes and why they are actually doing this.

[fdroidorg@floss.social]

@apicultor If you have questions why not drop by and ask directly? https://f-droid.org/about/#contact Posts from 2021 and half-truths on forums won't give you the information you need.

[m8947@mastodon.social]

@nomadmisha @fdroidorg @marcprux @ubports
told'ya google are evil, zionists evil. resists!

[apicultor@hachyderm.io]

@fdroidorg
Have you addressed the points made by the creator of #Wireguard regarding the security of your build infra?

wireguard inclusion policy violation (auto-updates w/o explicit user consent) (#3110) · Issues · F-Droid / Data · GitLab

Per https://f-droid.org/en/docs/Inclusion_Policy/ The software must not download additional executable binary files (e.g. addons, auto-updates, etc.) without explicit user consent....

GitLab (gitlab.com)

Supply chain security is super-duper underrated. Thanks for the spotlight, Jia Tan!

[denizenn@mastodon.social]

@fdroidorg @marcprux Contacted the Department of Justice and the US Federal Trade Commission with a request of acknowledgement from both.