So I’ve been in the rabbit hole of android privacy for some time, last I joined the GrapheneOS community but let’s just say that they doesn’t have a “healthy” opinion about other projects like f-droid.

So I am looking for generic communities that focus on mobile privacy that doesn’t have drama or toxicity or “extreme opinions”. Any suggestions? I prefer chat based communities like matrix or simplex instead of like reddit or lemmy.

  • @9tr6gyp3
    link
    204 months ago

    What does a healthy opinion of F-Droid look like though? Lol

    • @jet@hackertalks.com
      link
      fedilink
      English
      20
      edit-2
      4 months ago

      Fdroid is introducing another trusted party to your supply chain, which should be a factor in anyone’s threat molding.

      https://f-droid.org/docs/Reproducible_Builds/ However, with reproducible builds now a package is built and signed by both fdroid and the original developer, so you get a net security benefit of having a third party attesting they can independently reproduce the binary from source. Problem solved right? Well, yes but mostly no. Most projects and packages don’t have reproducible builds, so if your using fdroid for most packages your still trusting droid.

      I think a lot of the online hate comes from people making assumptions that their use case and threat model applies to everyone. That’s why I prefer discourse where we just talk about the attributes and not “you should”

      • Captain Beyond
        link
        fedilink
        13
        edit-2
        4 months ago

        I feel like there’s a lot of FUD around this subject, because people bring it up as if it’s purely a negative without talking about the reasons why it’s done the way it is. The whole point of F-Droid is that it’s a repository (not a store) of free software applications. They have an inclusion policy forbidding proprietary code and dependencies, and in order to enforce this policy they have to build from publicly available source code, and in order to do so they need to sign the builds themselves. This means, yes, you are trusting F-Droid instead of the upstream developer - but given F-Droid has higher standards than upstream developers this is a tradeoff I am willing to make.

        Reproducible builds solves this in a way that preserves the standards of F-Droid, however, “security peoples’” favored “alternatives” (such as Accrescent, Obtainium, and Google Play Store/Aurora Store) forego this entirely, showing they don’t either have a viable solution to offer or that they don’t really care about the problem that F-Droid is addressing to begin with.

      • @lord___vader@sh.itjust.worksOP
        link
        fedilink
        44 months ago

        I completely understand, but this only adversely affects you if f-droid getting hacked is in your threat model. And not everyone have that.

        • @jet@hackertalks.com
          link
          fedilink
          English
          24 months ago

          Yeah exactly. So pointing that out is sufficient, and it’s up to every user to decide if the benefit is worth the risk. And I’m sure for most people fdroid is a net positive.

          Now, I want to change gears, and talk about annoying personalities also being really beneficial. Crazy principled people drive change in the world. The open BSD founder, RMS, the graphene founder, these are crazy unreasonable uncompromising people which are difficult to get along, but they drive change. Sometimes we need those uncompromising people. I think putting up with them is the cost of a vibrant ecosystem.

          • @BearOfaTime@lemm.ee
            link
            fedilink
            1
            edit-2
            4 months ago

            I disagree.

            If you’re an asshole, people don’t want to work with you, and will actively avoid you.

            I’m the IT guru in my family and extended circle. Of the probably 100+ people I advise, none will ever use Graphene now.

            They alienate people with their hubris and condescension. Rather than help people understand their perspective, they act like it’s “the only answer”.

            That’s never a solution. Discussing pros and cons of different approaches moves us forward, not the Graphene “us VS them” mentality.

    • JackbyDev
      link
      fedilink
      English
      84 months ago

      What’s an unhealthy opinion of f-droid? Is something wrong with it? Genuine question. I’m out of the loop.

      • @lord___vader@sh.itjust.worksOP
        link
        fedilink
        64 months ago

        F-droid acts as a trust for all the apps you download through it, which means if F droid is hacked, hackers can push fake update to all the apps. It is an issue, but not the biggest concern of average joe. Although F-droid should take it pretty seriously.

        But I think hating on them is not the solution…

        • JackbyDev
          link
          fedilink
          English
          94 months ago

          Oh. Same is true for Google Play and literally every self updating app/program on the planet lmao.

          • @jet@hackertalks.com
            link
            fedilink
            English
            2
            edit-2
            4 months ago

            For Google Play: Google has root on play devices which is a separate issue, but the apps are actually signed by their developers and not google.

            • @refalo@programming.dev
              link
              fedilink
              7
              edit-2
              4 months ago

              not google

              This is not true… play store now requires you to give up your signing keys to google so they can sign the app themselves after injecting whatever they feel like. F-Droid does the same because they also compile your apps for you. Another reason some don’t trust F-Droid (or Signal, Tor and a bunch of other free/open source software for that matter) is that they received funding from OTF which is funded by the US government and some people don’t like that. And yes I know computers and the internet also came from the government /shrug

              I have no skin in this game, I am not intentionally trying to spread any FUD (but I realize some people will still claim so, they are free to do so), just relaying information I have seen elsewhere. Happy to provide sources if anyone likes.

        • Possibly linux
          link
          fedilink
          English
          34 months ago

          They have actually made a bunch of security enhancements to there systems and processes. You can look at the blog if you are curious.

  • Libb
    link
    fedilink
    144 months ago

    So I am looking for generic communities that focus on mobile privacy that doesn’t have drama or toxicity or “extreme opinions”. Any suggestions?

    the excessive and constant noise a limited number of people is making, their rage when it’s not pure hatred against whatever they don’t like or whoever they don’t agree with, is the main reason why, a Linux user worrying about privacy myself, I decided to stop wasting my time online with any such ‘tech’ communities. It has become almost impossible to have an open and calm discussion on any topic without someone jumping in and barking like some crazy dog — because reasons.

    No matter what their reasons or motivations are to be angry or hateful, I have zero desire to listen to endless rabid barking. There isn’t much to learn in that, at least when you’re not a dog.

    And I have no time for that either: we only have a limited amount of time to live before the game is over and there is no extra life to get, no second chance. I realized that a few years ago and decided I would not waste a second more of my time dealing with those constantly frustrated or hateful people. In tech or elsewhere.

    Tech-wise, I have had much more stimulating and enriching discussions in communities that are not tech (or privacy or security or Linux)-related but communities where tech can still be discussed and debated (including by very competent tech people) just always in a broader discussion that don’t focus on tech itself.

    • @lord___vader@sh.itjust.worksOP
      link
      fedilink
      124 months ago

      It’s sad that so many good projects is plagued by this crap. Like did we forget about the whole “respect other people’s opinions” thing?

      • Libb
        link
        fedilink
        9
        edit-2
        4 months ago

        Like did we forget about the whole “respect other people’s opinions” thing?

        I cant say if we have forgotten it or not, but it sure looks like we don’t want to hear about it very much.

        It’s all turned binary (pun intended): you’re with us or you’re against us, either you’re good or you’re evil (and then, you deserve to be eliminated). Which is as saddening as it is is… stupid.

    • @MigratingtoLemmy
      link
      English
      24 months ago

      If you’re interested, I’d be open to DMing about privacy and security. I would like to learn more about your situation and your threat model and what measures you’ve taken

      • Libb
        link
        fedilink
        24 months ago

        If you’re interested, I’d be open to DMing about privacy and security. I would like to learn more about your situation and your threat model and what measures you’ve taken

        Not sure to understand your question, my situation is nothing special. I’m a dude that cares about what I consider a fundamental human right, as essential as is/should be the freedom of expression: privacy. A right I certainly don’t want to see thrown away for a few already very rich people to be able to make even more crazy profit, nor in the name of convenience (including my own) not even for my own ‘security’ or well-being, for that matter.

        Is there anything in what I wrote that made you believe my situation was somewhat special?

        As for the ‘measures’ I have taken. I try to be careful & lucid when I use any app/services/device and I do as much as I possibly can without using them at all, aka offline and the analog or IRL way, which is not that hard for me as I often work much better using analog tools.

        If you have any specific question feel free to PM me, I can’t promise you an answer but at the very least I will let you know I’ve read it and can’t answer it.

  • @BearOfaTime@lemm.ee
    link
    fedilink
    10
    edit-2
    4 months ago

    Two words: Fuck Graphene

    (More words): and the assholes who run it.

    I’ve been flashing phones since my OG Droid in 2009. Done probably 200+ flashes across numerous phones.

    I’ve been in IT since the early 90’s.

    Had an error with the Graphene flash on a clean Pixel. The way they talked to me would’ve gotten me a re-training session with my management, possibly fired, back when I was on a help desk.

    Bunch of arrogant, condescending pricks. They need a Red Foreman boot up their ass.

      • sunzu2
        link
        fedilink
        114 months ago

        That ego lol

        Main guy got into a pissing match with Louis roassmann lol

        Some people got no social skills

  • @LoveSausage@lemmy.ml
    link
    fedilink
    9
    edit-2
    4 months ago

    I run graphene on several devices and recommend it. I do not participate in much discussion about it through. You can just use the best we got in android and be fine with that.

    Discussion forums are the same all over I think. I don’t see much difference around graphene here on Lemmy or XDA forum.

  • @MigratingtoLemmy
    link
    English
    64 months ago

    You can just join XDA. TBH if Graphene is not your thing and Lineage OS isn’t supported on your device, you can just unlock the bootloader and install the patched kernel using KernelSU which will give you the control you want.

  • Autonomous User
    link
    English
    5
    edit-2
    4 months ago

    ‘Just trust me bro’ hardware, Google Play Integrity API, banned and GrapheneOS is still simping it.

    Running away doesn’t fix this.

  • @lemonuri@lemmy.ml
    link
    fedilink
    14 months ago

    I’ve learned a lot about privacy/security from xmpp chatrooms, especially the room for the conversations client and the divestos chatroom. They both are kind of support chatrooms for the chat client/ android rom but privacy is often a topic and the programmers/ rom maintainers are also present and very knowledgeable. https://search.jabber.network/rooms/1

  • Possibly linux
    link
    fedilink
    English
    0
    edit-2
    4 months ago

    Be prepared to be assaulted by the Graphene OS community

    My suggestion would be the Calyx OS community or even the F-droid forms.