this post was submitted on 31 Aug 2023
16 points (100.0% liked)

Privacy

31628 readers
403 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
top 24 comments
sorted by: hot top controversial new old
[–] digger@lemmy.ca 3 points 1 year ago (3 children)

Something worth noting is that F-Droid is both an app to download other apps but they also maintains a repository of apps. You can use alternative store apps (like Droid-ify) with the F-Droid repository OR you could use the F-Droid app with a different repository (like IzzyOnDroid). You can mix and match to meet your needs.

I use the Droid-ify app with the F-Droid, IzzyOnDroid, microG, NewPipe, and Collabora repositories.

Once you start down this rabbit hole, give Obtanium a look.

[–] gunpachi@lemmings.world 1 points 1 year ago (1 children)

Neostore is also a good alternative to the normal f-droid client

[–] XpeeN@sopuli.xyz 1 points 1 year ago

Yep. Their permission and tracker built in viewer is a super qol feature

[–] possiblylinux127@lemmy.zip 0 points 1 year ago (1 children)

I would avoid adding other repositories because you are risking malware and anti features.

F-droid is slow to get updates but it also verifies each app

[–] digger@lemmy.ca 1 points 1 year ago

There is safety there, but you're just as safe using the the developer's own repository for their apps, like NewPipe, Collabora, or the Guardian Project.

[–] Squizzy@lemmy.world 0 points 1 year ago (2 children)

I just have the basic f droid app, the layout is awful and confusing. Is there one you suggest?

[–] digger@lemmy.ca 1 points 1 year ago

I'm a big fan of Droid-ify.

[–] monobot@lemmy.ml 1 points 1 year ago* (last edited 1 year ago)

I think he did suggest droid-ify with fdroid repo: https://github.com/Droid-ify/client

Looks good, I will try it out. You have it in F-droid :)

[–] qyron@sopuli.xyz 2 points 1 year ago (1 children)

Been using Fdroid to the point where my first boot into a new phone is:

Open chrome > download fdroid > open settings > uninstall/disable every single application I can > open fdroid > install all the relevant apps I require for making my phone useful

I'm just waiting for a small life upgrade in order to be able to support some app developers; it will be money better spent than using the standard google apps.

[–] iturnedintoanewt@lemm.ee 2 points 1 year ago (1 children)

You might want to consider your next phone to be a pixel+grapheneOS.

[–] ebd6a8c9051028dc1607@lemmy.ml 0 points 1 year ago (1 children)

any lineage os supported device is enough, i think

[–] lunicoDee@feddit.it -1 points 1 year ago

LineageOS isnt degoogled by default

[–] elbowgrease@lemm.ee 0 points 1 year ago (2 children)

I've always had a niggling worry that downloading apps from 3rd party app stores came with a higher risk of getting apps with viruses and spyware.

any truth to this?

[–] qyron@sopuli.xyz 0 points 1 year ago (1 children)

Not really.

Fdroid is a secure repositorie and the applications are reviewed before being made available for end users.

The repository is also highly focused on privacy and security and will warn if applications have security flaws or depend on non free services.

As an example, I use NewPipe instead of the standard YT app and it has a warning it depends on non-free services.

One other example I can give is Librera. It's a very feature rich ebook/pdf/etc reader. At some point, a security flaw was discovered and the app was instantly flagged has having such problems and users were advised to not install it.

[–] karlthemailman@sh.itjust.works 0 points 1 year ago (1 children)

Fdroid is a secure repositorie and the applications are reviewed before being made available for end users.

Reviewed by who though? Malicious apps even get through apple and Google's screening. I can't see how fdroid can match the capabilities of those guys.

[–] skullgiver@popplesburger.hilciferous.nl 1 points 1 year ago* (last edited 10 months ago)

[This comment has been deleted by an automated system]

[–] MrSqueezles@lemm.ee -1 points 1 year ago

Even small companies have to deal with, "supply chain", attacks, criminals putting code into open source repositories to steal data and get access to servers. App stores are major targets too.

There have been weather apps that need your location to show you weather and oops we also send your location history to our data center in China and sell that data.

There have been, "document scanner", apps that help you take pictures of things like credit card statements and did we not mention we send those images to Russian servers?

Do use a major brand phone like Samsung, keep your OS up to date, and don't expose private info to these apps or give them special privileges, especially, "accessibility", or, "screen reader", and you should be okay.

[–] c0mmando@links.hackliberty.org 0 points 1 year ago (1 children)

Love F-Droid but be aware of the risks and always try to use a developer repo when possible..

https://privsec.dev/posts/android/f-droid-security-issues/

[–] skullgiver@popplesburger.hilciferous.nl 1 points 1 year ago* (last edited 10 months ago) (1 children)

[This comment has been deleted by an automated system]

[–] c0mmando@links.hackliberty.org 0 points 1 year ago (1 children)

Doesn't affect the end user...... beyond diminished security. Are you implying I should trust Fdroid devs as much as I would trust Google devs?

[–] skullgiver@popplesburger.hilciferous.nl 1 points 1 year ago* (last edited 10 months ago) (1 children)

[This comment has been deleted by an automated system]

[–] c0mmando@links.hackliberty.org 0 points 1 year ago (1 children)

The diminished security resulting from the increased likelihood of a (single point of failure) supply chain attack.

Yes its possible for malicious devs to trojan apps, but due to apk signing it is much more difficult for a third party entity to induce a supply chain attack, which is my real concern when it comes to phone security.

If you have a lower threat model, this post isn't for you...

[–] skullgiver@popplesburger.hilciferous.nl 1 points 1 year ago* (last edited 10 months ago)

[This comment has been deleted by an automated system]

[–] Meowoem@sh.itjust.works -1 points 1 year ago

I went through a phase where I played every game on there, most were gloriously unfinished or ported from the zx spectrum. There were some real gems too.

That was years ago, what's it like now? Is there android wesnoth? Did any of the RPGs ever get to a fished state?