The #FDroid website has a new banner on top to remind visitors that #Google did not change course and #Android will be locked-down in under 200 days.

[apicultor@hachyderm.io]

@fdroidorg
Did you secure your build environment yet? Why must you re-sign everything instead of using signed artifacts from developers?

Until then, #Obtainium.

@marcprux

[fdroidorg@floss.social]

@apicultor Everything we do is transparent and public, eg. https://floss.social/@fdroidorg/116086537617519438

[fisk@little.tinypuppy.dog]

@fdroidorg @marcprux its a good thing actually as the main thing it affects is intimate partner violence stalking and really low hanging fruit malware. you can literally still sideload, you just cant distribute apks anonymously. you can still modify a phone to remove the restriction, just not without the owner noticing, which is the actual point. this is completely out of touch with the reality of the android malware ecosystem, the harm it causes and why they are actually doing this.

[fdroidorg@floss.social]

@apicultor If you have questions why not drop by and ask directly? https://f-droid.org/about/#contact Posts from 2021 and half-truths on forums won't give you the information you need.

[m8947@mastodon.social]

@nomadmisha @fdroidorg @marcprux @ubports
told'ya google are evil, zionists evil. resists!

[apicultor@hachyderm.io]

@fdroidorg
Have you addressed the points made by the creator of #Wireguard regarding the security of your build infra?

wireguard inclusion policy violation (auto-updates w/o explicit user consent) (#3110) · Issues · F-Droid / Data · GitLab

Per https://f-droid.org/en/docs/Inclusion_Policy/ The software must not download additional executable binary files (e.g. addons, auto-updates, etc.) without explicit user consent....

GitLab (gitlab.com)

Supply chain security is super-duper underrated. Thanks for the spotlight, Jia Tan!

[denizenn@mastodon.social]

@fdroidorg @marcprux Contacted the Department of Justice and the US Federal Trade Commission with a request of acknowledgement from both.

[simx72@defcon.social]

@fdroidorg @marcprux will this affect lineage phones? (or any other roms)

Directly or indirectly?

[nathanael@exquisite.social]

@fdroidorg @marcprux why is @GrapheneOS not listed? this feels a little bit like fearmongering

[juh@hostsharing.coop]

@marcprux @fdroidorg There ist no freedom in capitalism.

[lepinejpaul@mastodon.social]

@fdroidorg @marcprux : pour ma part, j'ai un fairphone 4 avec e/os installé, avec F-droid dedans depuis quelques années déjà et cette info ne me surprend nullement.

[apnoe_soeren@mastodon.social]

@fdroidorg @marcprux #e_mydata e/os is one of the aswers.

[dei@is.nota.live]

@techlore please make a video about it!

[celeduc@mastodon.social]

@IzzyOnDroid @fdroidorg @marcprux it is really surprising that the @EUCommission is okay with Google locking down our devices, digital sovereignty what-what?

[m2c_n3e@mastodon.xyz]

@Fynn @fdroidorg @marcprux Android has lost its appeal to me as a target for development. I also may order a Jolla Phone at home point, but I need to be sure that my banking apps work with it.

[tourma@tech.lgbt]

@fdroidorg
Ugh, looks like I might be using /e/OS sooner than expected.

[2something@transfem.social]

@fisk@little.tinypuppy.dog @fdroidorg@floss.social @marcprux@mastodon.social

The top grossing apps on Google Play in the U.S. are
1) Spyware and adware
2) Spyware and adware
3) Spyware and adware
4) Spyware and adware and rootkit
5) Spyware and adware
6) Spyware and adware and rootkit

I have a really hard time believing it's about "malware."

Also, how do you modify a phone to remove this restriction, assuming the manufacturer doesn't let you unlock the bootloader (as most don't)?

[moin@gruene.social]

@fdroidorg
Thank you for your amazing work. For me its time to switch to Linux in under 200 days.

@marcprux

[fisk@little.tinypuppy.dog]

@2something @fdroidorg @marcprux 1. I believe that it's specifically about stalkerware that gets distributed as sideloaded, anonymously signed APKs to avoid detection by Google Play Protect. I think this change will have a significant positive impact on the stalkerware market and result in a reduction in technology-facilitated intimate partner violence, making it a worthy tradeoff. Most open-source projects are not developed anonymously, and if developers don't want to get a certificate, nothing stops a third-party marketplace like F-Droid from building a signed, distributable APK for them. The same people complaining about this have already built the solution. "I'm altering the deal, pray I don't alter it further" just feels entitled and missing the point entirely.
2. I would specifically get a phone with an unlocked bootloader, because I want to run free and open source software on it, as I already have. I don't want other people tampering with my phone and requiring messing with the bootloader and performing a factory reset (which i would notice) to sideload untrusted apps is a security feature I want.

If you don't like it, try coming up with a better solution, or you know, try doing some work with victims of stalking by intimate partners to realize it is actually a much bigger problem for them than whatever spying Google Play Services is doing. Have a good day.

[cimb4@norden.social]

@fdroidorg i hope @shiftphones has planned for this already