131–140 of 349 posts
Earlier quoted context omitted.
Instead of trying to use POSIX on Android, use the Java based APIs, several shells written in Java available on the store. As well as programming environments. I use a couple of them to code on the go.
Just curious: which shells do you mean?
- ProtoShade
- Pydroid
If you mean a classical shell, I guess something like Another Term might do.
TL;DR: Android is trying to enforce all data being either writable, or executable, never both. iOS already does this. There are big security benefits (it becomes much harder to exploit an app). A disadvantage is it becomes much harder to make things like terminal emulators and things that want to download random code and run it. But those are by far the minority of apps, and it seems crazy to make a pretty massive se…
> But those are by far the minority of apps, and it seems crazy to make a pretty massive security tradeoff for something that 99% of apps don't need to do. Yet oddly, I as the user who paid $550 for my device would like to do that. I understand wanting to put a warning on it, but otherwise my device can kindly screw off and do what I've told it to do, or it will be taking a one way ride out the nearest window. The de…
Currently that number is about 1 ($30k) on an up to date android. I believe that if I had more bitcoins on a phone, and told people about it, there's a good chance a targeted exploit would steal those keys. Even if I had them encrypted, at some point I have to type a password in to decrypt, and that would be the point they'd be stolen.
However, on an iOS device (which is more robustly locked down), I'd probably happily store 10 bitcoins. (if I had them, hah!)
On dedicated hardware (like a trezor wallet), i'd also be confident up to about 10 bitcoins (far less attack surface, but also a less competent security team than Apple can afford).
On an outdated android, it would be more like 0.1 bitcoins - there are trivial ways to root them from the web browser and any old website can do it!
Considering that for many people, access to all the private data on their phone could ruin their job, relationships, and even put them in prison, I'm sure a lot of people value the security of their phone at multiple years salary. If I have to choose between that and the ability to run an emulated game slightly faster, I'm totally choosing security!
Earlier quoted context omitted.
You can still install whatever apps you want on your device. Much easier than you can on an iPhone.
According to this comment, sideloading is being disabled too: https://news.ycombinator.com/item?id=25645478
Earlier quoted context omitted.
That's also not possible anymore. The new rules explicitly forbid loading any Java code that wasn't previously verified, signed, and published through the Play Store. Those apps are affected by the same rules as Termux.
Who said anything about loading remote Java code? And yes you need to install application extensions via the store, so what?
Writing your own code and executing that is explicitly forbidden. Be it REPLs or compiler suites. That too would have to go through the store. Only interpreters are allowed.
The other issue is obviously that you can’t have an extension developed by person A for an app developed by person B. It’s very common to see mods, plugins, addons whatever you may call them on many other platforms, but Android explicitly forbids this.
Earlier quoted context omitted.
> But those are by far the minority of apps, and it seems crazy to make a pretty massive security tradeoff for something that 99% of apps don't need to do. Yet oddly, I as the user who paid $550 for my device would like to do that. I understand wanting to put a warning on it, but otherwise my device can kindly screw off and do what I've told it to do, or it will be taking a one way ride out the nearest window. The de…
My personal security metric is "how many bitcoins would I leave in a wallet app on this phone". Currently that number is about 1 ($30k) on an up to date android. I believe that if I had more bitcoins on a phone, and told people about it, there's a good chance a targeted exploit would steal those keys. Even if I had them encrypted, at some point I have to type a password in to decrypt, and that would be the point they…
There are also trivial ways to root ancient iOS versions with a web browser, too. In fact, I think that technique was more common among iOS devices than it ever was among Android...
Earlier quoted context omitted.
Note that there are 297 hidden items in that issue so you have to click "Load more..." ceil(297/60) times to read all of the comments about how APK packaging is soon necessary for latest Android devices so the termux package manager can't just dump executable binaries wherever. FWIU: - Android Q+ disallows exec() on anything in $HOME, which is where termux installed binaries that may have been writeable by the execut…
What about development on-the-device? - It seems C compiled with clang on the device wouldn't be executable? (If it was, that would be a way around the restriction: distribute packages as source, like the good old days) > offer users the option of generating an apk wrapping their native code in a usable way. https://github.com/termux/termux-app/issues/1072#issuecommen... This seems a promising solution: compile from…
As of Android 10, PGO data files are uploaded into the store and shared across similar devices so that the AOT compilation with PGO can be done right away on installation.
Having bytecodes doesn't mean being interpreted.
Earlier quoted context omitted.
I think 5 years of support is reasonable.
No. Beside Android 5.x/6.x devices, I has Symbian 9.x (Nokia N82) smartphone which works perfectly. And there are a lot of new apps for it: - https://old.reddit.com/r/symbian/new P.S. My 10+ year-old laptop perfectly works with latest MX Linux distribution (based on Debian 10 buster ) and all modern FLOSS desktop apps (GIMP, FreeCAD, Inkscape, etc.) works like a charm on it. So, software devs should NOT declare users…
Earlier quoted context omitted.
Price, for one. And also the company's reputation for transparency.
So you expect a performant niche phone for a low price? Concerning the transparency, I agree, they have some issues. But it does not concern me as long as they actually deliver (and they do).