Live data from Hacker News

F-Droid version of KDEConnect uninstalled by PlayProtect

discuss.kde.org

31–40 of 192 posts

Re: F-Droid version of KDEConnect uninstalled by PlayProtect

#32
post #2

One way to be a little less constantly violated by your phone is to run GrapheneOS, instead of iOS or ordinary Android: https://grapheneos.org/

It's still based on Android though - so isn't it building on sand ? Isn't it better to focus our efforts on projects unrelated to Android, especially since some viable ones have appeared recently : Librem 5 and especially PinePhone.

Banks in many countries require an Android phone for online banking. Even if they offer an online-banking website that you can access with any browser, you may still need the Android app for 2FA. This is one of a number of reasons why the PinePhone or Librem is unfortunately not a daily driver. Also, things like paying for parking or interacting with public services are moving to Android apps in some places.

Re: F-Droid version of KDEConnect uninstalled by PlayProtect

#34
post #6

Earlier quoted context omitted.

You make a convincing argument. I'm switching to GrapheneOS for my next phone upgrade. Here is the source code: https://grapheneos.org/source > “he used GrapheneOS” is 100% going to be used against you in court. I look forward to using this as a litmus test for legal representation.

Are you personally capable of ensuring: A. The builds match the code? B. The NSA hasn’t stolen the signing key and isn’t feeding you customized images? True, you can’t verify that with iOS or Android either. I am saying though that trusting my security because it’s safer… by being in some guy’s garage feels like an odd trade. One that shouldn’t be casually ignored, at least.

If your threat model for your phone includes the NSA as an adversary, maybe you shouldn't be using a phone at all.

For the rest of us, who just want to be violated less, we have to choose our poison. The corporate options are shameless violators, and the alternatives are gambles.

Re: F-Droid version of KDEConnect uninstalled by PlayProtect

#36

Earlier quoted context omitted.

It's still based on Android though - so isn't it building on sand ? Isn't it better to focus our efforts on projects unrelated to Android, especially since some viable ones have appeared recently : Librem 5 and especially PinePhone.

Banks in many countries require an Android phone for online banking. Even if they offer an online-banking website that you can access with any browser, you may still need the Android app for 2FA. This is one of a number of reasons why the PinePhone or Librem is unfortunately not a daily driver. Also, things like paying for parking or interacting with public services are moving to Android apps in some places.

Don't most banking apps reject non-GooglePlay/unofficial-image/rooted phones?

Re: F-Droid version of KDEConnect uninstalled by PlayProtect

#38
post #35
post #33

[flagged]

I don't understand what you mean ? F-droid doesn't ship a keyboard app.

If they installed a keyboard with the same app id (e.g. com.google.[...]) F-Droid would try to update it and ask the user to confirm the update since F-Droid can't update an app that was installed by another app store.

I'd be curious which keyboard this is. Maybe Gboard took over the app id of the previously foss android keyboard.

PS: I recommend F-Droid Basic which supports silent background updates on any Android 12 without root.

Re: F-Droid version of KDEConnect uninstalled by PlayProtect

#39

Earlier quoted context omitted.

Banks in many countries require an Android phone for online banking. Even if they offer an online-banking website that you can access with any browser, you may still need the Android app for 2FA. This is one of a number of reasons why the PinePhone or Librem is unfortunately not a daily driver. Also, things like paying for parking or interacting with public services are moving to Android apps in some places.

Don't most banking apps reject non-GooglePlay/unofficial-image/rooted phones?

Yes, and the reasons are instructive.

When you get to the lowest level, technically, the banking apps want to store files on the phone that the user can't access.

This means that something like lineageos can run banking apps, if the phone tells the banking app what the app wants to hear. It's fiddly but can be done, and in fact it is what I do on my private phone. It also means that a platform that fundamentally gives users the right to read all the files on the phone (ie. to make a complete backup) will not be supported by banking apps, because such a platform will not let the banks do what they think they need to do.

I think this implies that such platforms can't grow beyond a niche within a niche.

Re: F-Droid version of KDEConnect uninstalled by PlayProtect

#40
post #35
post #33

[flagged]

I don't understand what you mean ? F-droid doesn't ship a keyboard app.

The AOSP keyboard was available on f-droid when I installed f-droid, and the f-droid app kept nagging me to replace the keyboard app on my phone with the debloated AOSP version from f-droid. Debloated, in this case, meaning without support for minority languages such as mine.
Post reply on HN