41–50 of 52 posts
[flagged]
I think this is an unfair comment. This is like complaining about an agriculturist being awarded money for a novel agricultural technique they developed, but they aren't saving the penguins in the Antarctic...
F-Droid does not exist in vacuum, their actions send message!
F-Droid is indeed a nice alternative for Play Store, but still, it's not perfect. https://privsec.dev/posts/android/f-droid-security-issues/
[flagged]
As a queer person I don't even know what I'd want from a CoC like that. It feels like I'd be giving up the freedom I love from F-Droid so I could better police other apps (which is something I don't want or need). Considering how absolutely useless CoCs are in other software I use, I'm pretty happy with where F-Droid is today.
Well deserved. Though, I have problems in "discovering" apps for a particular purpose. It would have helped if there was a vote-based curated app categories section. My current strategy is googling for "[category (e.g. 2FA or note-taking)] + reddit + open-source" then opening up each suggestion's git source and manually look for things like tech stack or project stars or number of contributors.
However it's usage does not seem to be widespread.
Earlier quoted context omitted.
It's not. Stop being in an echo chamber. Refer to this post for more valid criticism: https://news.ycombinator.com/item?id=42653176
In order: It is; the authors appear to be operating in a model where they completely trust app authors and nobody else, though they never actually spell out the threat model (which really should make us view their assessment skeptically anyways), where F-Droid specifically avoids trusting app authors. Nearly all of their objections come down to this single difference. What echo chamber? I'm not aware of anyone else a…
Earlier quoted context omitted.
Setting aside agreement or disagreement, what about that comment is striking you as symptomatic of coming from an echo chamber?
Oh please. It's a factual argument and you've contributed nothing to it apart from steering away from the goalpost
And I just want to know what you found echo chamberry about the other comment. Can you enlighten me? Maybe that way I can avoid all of the mistakes that I'm making.
F-Droid is indeed a nice alternative for Play Store, but still, it's not perfect. https://privsec.dev/posts/android/f-droid-security-issues/
Assuming one did have reproducible builds, would you even need signing keys anymore? All you would need is to build the app yourself or have some trusted third party build it and verify that both outputs are the same. You could also use md5s published by the developer and check that against the f-droid build. It seems like the advantage of signing is pretty small at that point. At least in the case I am thinking of,…
Also, not everyone is equipped to build software. Signatures enable you to easily know that there was no MITM tampering (or at least, to assume much lower chances of it), with less overall trust required.
Also check out https://droidify.eu.org . The client is better IMHO.
https://f-droid.org/en/packages/nya.kitsunyan.foxydroid/ is quite nice also
For those who don't know, there's also Neo store, which has F-Droid in it. https://github.com/NeoApplications/Neo-Store