mastodon - Link to source
We're starting a sprint to look at all the issues preventing #ReproducibleBuilds in all the apps we ship. Most of the issues are simple fixes in the upstream code, like unsorted outputs or timestamps included in the build.
You can help make the #FreeSoftware #Android ecosystem be more reproducible! See the failures here and help us report them upstream: verification.f-droid.org/faile…
#FreeSoftware #android #reproduciblebuilds
in reply to F-Droid

mastodon - Link to source

Sylvia

I'd also suggest looking at and linking to @IzzyOnDroid's great documentation for app devs on what to watch for: gitlab.com/IzzyOnDroid/repo/-/…, which is much more helpful than just creating upstream issues to say "broken, please fix" without detailed steps.

(By the way, if someone wants to try building Reproducible Builds themselves, I'd strongly suggest looking at gitlab.com/IzzyOnDroid/repo/-/…, which powers the #IzzyOnDroid #ReproducibleBuild system, covering over 30% of IoDs 1223 apps already)


Reproducible Builds · Wiki · IzzyOnDroid / repo · GitLab

The F-Droid compatible repo at https://apt.izzysoft.de/fdroid/
GitLab
#izzyondroid #reproduciblebuild @IzzyOnDroid ✅
in reply to Sylvia

glitchsoc - Link to source

Fay 🏳️‍🌈

Indeed. Merely reporting failures upstream is easy. And whilst sometimes fixes can also be quite easy, some expertise is often required to figure out what to do about observed differences.

See e.g. github.com/TeamNewPipe/NewPipe…

Good documentation can help a lot here. As is having people with RB expertise, like @IzzyOnDroid, helping developers to debug issues :)

You also need people to develop and maintain the RB tooling and workarounds everything relies on. And to report things like compiler bugs to Google. Which so far has been pretty much just me.


F-Droid can't build · Issue #11754 · TeamNewPipe/NewPipe

Checklist I am able to reproduce the bug with the latest version given here: CLICK THIS LINK. I made sure that there are no existing issues - open or closed - which I could contribute my informatio...
GitHub
@IzzyOnDroid ✅
in reply to Fay 🏳️‍🌈

glitchsoc - Link to source

Fay 🏳️‍🌈

@SylvieLorxu @IzzyOnDroid

Yes, there is plenty of low hanging fruit like embedded timestamps or nondeterministic ordering. Many apps are already easily reproducible or require only small fixes.

But the ecosystem is constantly moving: old toolchain and dependency bugs get fixed, but new ones keep popping up.

Reproducible Builds are not just an item on a checklist, something you (ask upstreams to) enable and then you're done. Especially when it's a hard requirement like at F-Droid where new builds no longer being reproducible means users will not be able to get updates.

It's an ongoing process involving not just upstream app developers, but also maintainers of repositories, clients, and rebuilders; those involved in outreach and writing documentation; developers and maintainers of tooling, toolchains, and dependencies. And often requires a lot of collaborative debugging :)

It requires teamwork and an ongoing commitment to investigate and fix new issues when they pop up.

#ReproducibleBuilds

#reproduciblebuilds @Sylvia @IzzyOnDroid ✅
This entry was edited (1 year ago)
in reply to Sylvia

mastodon - Link to source

IzzyOnDroid ✅

I know you don't like to link to us as you don't want to "endorse" 3rd-party repos – but maybe it's time you forget your grudges, and to accept the expertise you're offered? After all, aren't your RBs using our tools (as our repo still uses yours)? Haven't we adopted from each other in both directions? We have no issues linking to you (the wiki @SylvieLorxu just mentioned does that, for example). Your turn now 😉
@Sylvia
in reply to IzzyOnDroid ✅

mastodon - Link to source

Hans-Christoph Steiner

@IzzyOnDroid @SylvieLorxu I would be happy to see your repo become #FreeSoftware! As you well know, F-Droid only endorses verifiable free software projects.

It is also great to see all your work on #ReproducibleBuilds. We are continuing to build upon our years of effort there. Our approach is focused on identifying issues and getting things fixed upstream as much as possible. Then devs do not need to use any special tools to achieve reproducible builds.

#FreeSoftware #reproduciblebuilds @Sylvia @IzzyOnDroid ✅
in reply to S1m

mastodon - Link to source

IzzyOnDroid ✅

@S1m now, that's not possible with @fdroidorg anymore; support for this was broken for fdroidserver in January, unfortunately. It's still possible with IzzyOnDroid, though, as we used a different patch (and yes, we have at least 1 app which uses key rotation (Occtax), and our documentation recommends that for key changes). Though we don't need that for RBs, as RB verification runs on a separate track here, so we can "make apps RB" even after they have been listed here for a while. @SylvieLorxu
@Sylvia @F-Droid @S1m
in reply to Hans-Christoph Steiner

mastodon - Link to source

IzzyOnDroid ✅

@eighthave @S1m @SylvieLorxu Good to know your stance on this has changed now – back in April, when we warned about breaking support for key rotation (it was still supported before that MR was merged), it was not important: gitlab.com/fdroid/fdroidserver…

Had you accepted our contributions back then, APKs with rotated keys would still work with fdroidserver (as they do at IzzyOnDroid, where those contributions have been implemented).


get_first_signer_certificate: check all v1 v2 and v3 certs (!1466) · Merge requests · F-Droid / fdroidserver · GitLab

contributes to #1068
GitLab
@Hans-Christoph Steiner @Sylvia @S1m
in reply to IzzyOnDroid ✅

mastodon - Link to source

Hans-Christoph Steiner

@IzzyOnDroid @S1m @SylvieLorxu The issue you are pointing to is only for APKs that have APKv1 signatures. That means apps with minSdkVersion less than 24 (Android 6 and older). That is devices that have not had an OS update since 2015. That is maybe a couple of percent of Android users? So I decided my limited time was better spent elsewhere rather than sinking days of work to supporting a small percentage of apps on a tiny percentage of devices. That said, I welcome contributions.
@Sylvia @IzzyOnDroid ✅ @S1m
in reply to Hans-Christoph Steiner

mastodon - Link to source

IzzyOnDroid ✅

@eighthave @S1m @SylvieLorxu I won't delve into that again, Hans, so let's stop that here please. You've spent 2 weeks of that valuable time on an alternative implementation back then instead of accepting contributions offered to you by experts (not mine, I'm not expert in that area). And sorry, but our time is limited, too, so we cannot sink days into fixing that again for you 😉
@Hans-Christoph Steiner @Sylvia @S1m
in reply to F-Droid

glitchsoc - Link to source

Fay 🏳️‍🌈

You might want to mention that unlike the rebuilders run by e.g. @IzzyOnDroid, which verify APKs built and published by upstreams, in a build environment customised for that, your linked verification server reproduces F-Droid's builds (which may be patched), using F-Droid's build environment. That's kind of important when you're going to report issues upstream.
@IzzyOnDroid ✅

mastodon - Link to source
Neznám žádného miliardáře osobně, ale k jednomu mám už léta velkou úctu a respekt a opravdu to není nadarmo.
forbes.cz/jezisek-v-jablotronu…

Zaměstnancům připsali k výplatě tři sta tisíc. Ježíšek přišel do Jablotronu dřív | Forbes

Na podíl ze zisku mají nárok všichni, od uklízečky po vývojáře. Ze speciálního účtu mohli zaměstnanci vybrat peníze až po pěti letech. Dostali je ale dřív.
Jana Pšeničková (Magazín Forbes)

sharkey - Link to source
Auf das alljährliche, adventliche Bangen, ob für @komin@bildung.social genügend #Spenden eingehen, um die Arbeit im kommenden Jahr fortsetzen zu können, würde ich eigetnlich gern verzichten 🙂
kom-in.de/spenden
#Blindenhörzeitschriften #digtialeTeilhabe #Inklusion

Spenden

Wir sind für Unterstützung dankbar: Durch kritische Begleitung, praktische Mitarbeit, Gebet und durch Geldspenden
www.kom-in.de
#inklusion #blindenhorzeitschriften #spenden #digtialeteilhabe @KOM-IN-Netzwerk

bridgy-fed - Link to source

'"We want to help people, we don't want to punish people," the premier said at a Queen's Park press conference where he announced an amendment to the Trespass to Property Act that would mean fines of up to $10,000 or up to six months in prison for repeat offenders.' www.thestar.com/politics/pro...

Doug Ford to crack down on hom...


Doug Ford to crack down on homeless encampments with fines for drug use and more funding

The premier said his government will earmark an additional $75.5 million on shelters and ensure cities are spending the money to help those in need.
The Toronto Star

mastodon - Link to source

#Catima 2.34.1 is out!

This fixes a minor bug in Catima 2.34.0 where selecting an "invalid" pkpass file (corrupted/not actually pkpass) after choosing to open from Pkpass would cause the app to crash. Now, you just get a little message stating the file could not be read instead.

Coming soon to an app store near you.

github.com/CatimaLoyalty/Andro…
catima.app

#IzzyOnDroid #GitHub #FDroid #GooglePlay


Release 2.34.1 · CatimaLoyalty/Android

Fix crash when opening invalid pkpass files
GitHub
#fdroid #github #googleplay #catima #izzyondroid
This entry was edited (1 year ago)

mastodon - Link to source
Another Year with Android is Almost Over: A Look Back at What 2024 Brought to the Table accessibleandroid.com/another-…

Another Year with Android is Almost Over: A Look Back at What 2024 Brought to the Table - Accessible Android

It's that time of the year again when I reflect on my journey with Android. Back in 2012, I decided to purchase my first Android phone and never looked back.
Kareen Kiwan (Accessible Android)
in reply to Accessible Android

mastodon - Link to source

Simon Jaeger

This is very well done and informative. The only thing that comes to mind for me is that 2024 is the year Eloquence is truly dying. Lots of modern chips are losing the ability to run 32-bit apps at all, so new phones like the S24 and OnePlus 12 are not going to get Eloquence.

This article also led me to the opinion piece on Samsung's Talkback, which brings me to my own saga. I have two Samsung phones running Android 12 and 13, and I've force-removed Samsung Talkback and replaced it with Google's version. Lately, I've been noticing that Talkback crashes in certain apps or webviews, and the crash is bad enough to require a second s'creen reader to fix it. The first time it happened, I had to get very painful video assistance to authorize ADB and fix it. This is the user experience people get if they want to break away from Samsung Talkback now. With two of my phones doing it and at least one other report of the same thing on a modern phone, we are looking at a serious setback to running the latest Talkback. Between this and the incredible software bloat, I'm now actively recommending people avoid Samsung. I'm sure some other phone manufacturor will adopt a similar update policy next year, and Pixels are nothing to sneeze at either.

Accessible Android reshared this.

in reply to JamminJerry

mastodon - Link to source

Simon Jaeger

@JamminJerry My guess: This is just an inertia problem. Samsung doesn't really seem interested in making meaningful changes to Talkback anymore, so once in a while someone merges in existing changes and releases an update. Switching to Google's version isn't necessarily a bad idea, it just takes work and system-level changes and they just can't be bothered.
@JamminJerry
This entry was edited (1 year ago)

mastodon - Link to source

Big thanks for the @eff for these recommendations to the #EU:

✅ Protect users’ rights to #secure, #encrypted, and #private communication

✅ Adopt a #privacy-first approach to fighting online harms like #targeted #ads

✅ User-centric approach to regulate big tech platforms (Digital Markets Act)

✅ Create conditions of fair digital markets that foster choice innovation and fundamental rights

We at Tuta couldn't agree more! 👏 👏 👏

mastodon.social/@eff/113640698…

Electronic Frontier Foundation (@eff@mastodon.social)

The next 5 years are pivotal for EU digital policymaking, with European regulation shaping global tech standards.
Mastodon
#privacy #EU #encrypted #ads #private #secure #targeted @Electronic Frontier Foundation

mastodon - Link to source

"I left the Settings app running" shouldn't be a laptop battery killer.

Anyone interested in significantly lowering power consumption of the #GNOME Settings (control center) app when idling on the WiFi, Bluetooth or Sound panels? My suggestion is to throttle the hell out of it when the window is not in focus: gitlab.gnome.org/GNOME/gnome-c…
This is not an unheard of idea, it's been done in the gaming industry (I saw #PathOfExile doing exactly that, when I last played… a long time ago) :blobcatcoffee:


Reduce CPU and battery consumption: throttle / stop refreshing WiFi networks and Bluetooth devices when window is defocused (#3263) · Issues · GNOME / Settings · GitLab

Usecase I sometimes (often) launch GNOME Settings to configure something related to the WiFi or to turn a bluetooth device on/off,...
GitLab
#gnome #pathofexile

mastodon - Link to source

The newest point release for Thunderbird for Android/K-9 has landed on the Google Play Store, with F-Droid coming soon. We’re starting on improvements to the account drawer, and more customizable icons that stay in one place have landed in this release. Thank you to all our community contributors, and see what’s new/changed/fixed in our changelog: github.com/thunderbird/thunder…

#Thunderbird #OpenSource #Android


Release Thunderbird 8.2 · thunderbird/thunderbird-android

New: Account initials now use the display name, improving customizability Account icons remain in the same position when selected Help text linking to support page added for Gmail login issues Ch...
GitHub
#android #opensource #thunderbird
Unknown parent

mastodon - Link to source

Thunderbird: Free Your Inbox

@homeindorset Thanks so much for trying it, and we hope you're still enjoying it!

Extensions are a tricky issue - since the Android app is a native app, the desktop extensions aren't compatible. But opening up development to native extensions would be a great suggestion for Mozilla Connect! connect.mozilla.org/t5/ideas/i…


Ideas

Submit and vote for ideas
connect.mozilla.org
@Richard Cole ¯\_(🧔🏻)_/¯

mastodon - Link to source

Are you still using the email provider that suffered the worst breach in history? 🙈 It’s time to delete that Yahoo Mail account, and upgrade to get privacy! 🔒

Step 1: Delete your Yahoo Mail tuta.com/blog/how-to-delete-ya…
Step 2: Get a free end-to-end encrypted mailbox tuta.com/secure-email

Yahoo! Yes, delete this account.

How to delete your Yahoo account (on any device) | Tuta

Getting rid of an old Yahoo email address doesn't need to be a hassle. Here's how to delete a Yahoo account in a few easy steps on iPhone, Android or browser.
Tuta

mastodon - Link to source

Workbench 47 is out! 🛠️

The highlight of this release is experimental TypeScript support by GSoC student @vixalientoots ✨

But there's more!

blog.sonny.re/workbench-47

#GNOME #GTK #TypeScript #GSoC

A screenshot of Workbench. On the left side the choosen programming language is "TypeScript" On the right side, the preview shows "Welcome to TypeScript"

Workbench 47

A new release of Workbench is available. As the release version indicates; it now uses the GNOME SDK 47. Roland Lötscher added an actio...
Sonny's
#gnome #gtk #typescript #gsoc @Angelo Verlain
This entry was edited (1 year ago)

mastodon - Link to source

‼️🐦 Ptáci v Evropě stále ubývají. Vyplývá to z aktualizované verze indikátorů evropských ptáků, která je založena na údajích z 30 zemí a odráží změny početnosti 168 v Evropě hnízdících druhů.

📉 Za 44 let početnost běžných ptačích druhů klesla o 18 %.

birdlife.cz/evropsti-ptaci-si-…

Evropští ptáci si od loňska nepolepšili • Česká společnost ornitologická

Ornitologové dnes zveřejnili aktualizovanou verzi indikátorů evropských ptáků. Ke zvrácení jejich dlouhodobě klesajícího trendu však ani letos nedošlo.
Česká společnost ornitologická (Česká ornitologická společnost)

mastodon - Link to source

You very likely heard something about how adults can’t grow new brain cells. That is wrong. We’ve known it to be false for decades — but thanks to ongoing research, we now know it to be wildly false.

Said it before, saying it again: anybody who wants to convince you that you can’t learn, can’t change, and can’t grow is (1) wrong and (2) somebody who has some kind of interest in keeping you contained. Beware. newsie.social/@TheConversation…

The Conversation U.S. (@TheConversationUS@newsie.social)

Adults grow new brain cells – and these neurons are key to learning by listening https://buff.ly/3ZIjcr1
Newsie
This entry was edited (1 year ago)

mastodon - Link to source
Comcast Says It Could Lose Over 372,000 Internet Customers In 2024 As Cord Cutting 2.0 Grows cordcuttersnews.com/comcast-sa…

Comcast Says It Could Lose Over 372,000 Internet Customers In 2024 As Cord Cutting 2.0 Grows | Cord Cutters News

Comcast shares tumbled nearly 10% on Monday after the company projected a significant loss in broadband subscribers for the current quarter.
Luke Bouma (Cord Cutters News)

mastodon - Link to source
CNBC Launches CNBC+ Streaming Service For $14.99 a Month cordcuttersnews.com/cnbc-launc…

CNBC Launches CNBC+ Streaming Service For $14.99 a Month | Cord Cutters News

CNBC is set to join the streaming wars with the launch of CNBC+, a new stand-alone streaming service slated to debut in the first quarter of 2025, according to a report by Variety today, but it looks like the service is now live.
Luke Bouma (Cord Cutters News)
in reply to daniel:// stenberg://

mastodon - Link to source

Harry Sintonen

Indeed, it was all manual code review. Fuzzing can only go so far in detecting logic flaws (since logic flaws rarely result in a crash, they're quite difficult to instrument).

As background: I spotted some unrelated commit to the .netrc parsing code and that brought this ancient code to my attention. Fairly quickly I could see that *something* was off but couldn't put a pin on it immediately. After some pondering, I could figure out a scenario that would show demonstrable information leak.

This entry was edited (1 year ago)

mastodon - Link to source

Help us improve LibreOffice Writer!

Take a few minutes to share your thoughts on the templates you need most. Your input will directly shape new, user-friendly templates. Survey is open for the next 2 weeks! 💡

👉 survey.documentfoundation.org/…

(We needed to restart the survey since it run on a non-free platform. Sorry for the inconvenience.)

Writer templates

survey.documentfoundation.org
This entry was edited (1 year ago)

mastodon - Link to source
Gemini 2.0 Flash, with agentic focus and real-time camera/ screen/ microphone access is here, and it'll reach the mobile app on Android in January. Try it here now: aistudio.google.com/live

Sign in - Google Accounts

aistudio.google.com

reshared this

mastodon - Link to source

Paměť novin – aplikace, která umožňuje sémantické vyhledávání ve starých novinách z přelomu 19. a 20. století. Jedná se o prototyp určený k testování, minulý týden zpřístupněný účastníkům konference Archivy, knihovny, muzea v digitálním světě 2024.
Aplikaci můžete vyzkoušet na pametnovin.cz, kde použijete přihlašovací údaje:
👤 Uživatelské jméno: pametnovin
🔒 Heslo: pametnovin

Klíčová čísla
🗞️ 16 novinových titulů
📅 Období: 1893 až 1913
📰 44 000 výtisků
📄 350 000 stran
🔍 7 milionů prohledávatelných textů

Co aplikace umí?
✅ Identifikuje nejrelevantnější články na základě vašeho dotazu díky sémantickému vyhledávání.
✅ Vytváří odpovědi pomocí velkého jazykového modelu, který kombinuje informace z historických textů.
✅ Poskytuje zpětné odkazy na zdroje.

Aplikace přináší nový způsob interakce s rozsáhlými digitálními archivy, umožňuje objevování historických událostí v kontextu a usnadňuje práci s velkým množstvím dat.
Stále se jedná o prototyp, a proto oceníme vaši zpětnou vazbu!

🔗 Vyzkoušejte ji na pametnovin.cz

Paměť novin

www.pametnovin.cz
This entry was edited (1 year ago)
in reply to Moop

mastodon - Link to source

Tamas G

interesting: On iOS 18.2, typing that in the text field of an empty message reads, " 1 1 back quote 50." I also discovered the same quirk with the number 711, so I wouldn't be surprised if on Mac OS that also wigged out like that. Looks like somehow it's getting passed to be parsed as speech parameter values instead of getting processed by the text processor part of Eloquence for reading.

mastodon - Link to source
Mist World 3-in-one simulator updates: (mwgame.wiki/mistsim.html):
- we now do a loop recurring until all remaining shards that are level 1 are exhausted. This should make gem crafting pricing and levels more accurate when using the "use leftover shards" checkbox.
- live region updates for NVDA: aria-live is primarily triggered by changes to the content of an element, not changes to its attributes. If you're only changing an attribute of the input field (like its value), some screen readers might not pick up on that as a content change. NVDA is one of these, so it was decided that a status div serves better of a purpose here over an input.
- added a 4th radio to Gem simulator: "Calculate by starting gem inventory amount and level " which will let you specify one starting gem and level, then type in an amount. Plans are for this feature to expand into a gem-agrigator.JS which would let you add and generate multiple fields for each level you have.
- shard price updates current as of December 10th from the game.

Mist World 3-in-1 simulator

mwgame.wiki
This entry was edited (1 year ago)

mastodon - Link to source
The world's first carbon-14 diamond has been produced with the potential to provide power for thousands of years.
gov.uk/government/news/diamond… #solarpunk #cyberpunk #solarpunkart #sciencefiction #future #community #ecopunk

Diamonds are forever? World-first carbon-14 diamond battery made

UK Atomic Energy Authority (GOV.UK)
#cyberpunk #solarpunk #sciencefiction #future #community #ecopunk #solarpunkart

mastodon - Link to source
[Blog Post] Apple releases iOS 18.2 and iPadOS 18.2; Bringing Fixes and Refinements for VoiceOver and Braille Users applevis.com/blog/apple-releas…

Apple releases iOS 18.2 and iPadOS 18.2; Bringing Fixes and Refinements for VoiceOver and Braille Users | AppleVis

Apple has today released iOS 18.2 and iPadOS 18.2 to the public; bringing several accessibility fixes and feature refinements for blind, DeafBlind, and low vision users. iOS 18.
www.applevis.com
⇧