⚠️ 🚨 It’s time to stop using Blabber.im 🚨⚠️
The abandoned fork of #Conversations_im has a critical security issue: attackers can bypass STARTTLS negotiation, resulting in an unencrypted connection to a fake server. This vulnerability is similar to the STARTLS attack discovered in various email clients¹
✅ Fixed in Conversations 2.13.1 (Feb 2024)
📢 Please migrate to Conversations immediately! It's free on Google Play until the end of the year and always free on #fdroid
#Catima 2.34.1 is out!
This fixes a minor bug in Catima 2.34.0 where selecting an "invalid" pkpass file (corrupted/not actually pkpass) after choosing to open from Pkpass would cause the app to crash. Now, you just get a little message stating the file could not be read instead.
Coming soon to an app store near you.
#Catima 2.34.0 is out!
This release adds support for #Passbook (#pkpass) files, commonly used for event tickets and more!
It also contains some other minor fixes and better handling of image thumbnails (especially transparent ones).
On the end-user side, this release probably doesn't look that different, but it contains some major code refactoring. It is also the first release with #Kotlin code in it.
github.com/CatimaLoyalty/Andro…
#IzzyOnDroid #FDroid #GitHub #GooglePlay
Add Passbook (.pkpass) support Fix import of transparent PDF files Improve display of transparent thumbnailsGitHub
Thanks for all your patience, @fdroidorg users! Thunderbird for Android is now available on F-Droid - download away!
#Thunderbird #ThunderbirdforAndroid #fdroid #OpenSource
f-droid.org/packages/net.thund…
Thunderbird is a 100% open source, privacy focused email app.f-droid.org
What? Release of this #opensource software on a proprietary platform first?! (Google).
You can do better than that!
#opensource #linux #fdroid #google #android
This week in #FDroid (TWIF) is a lot to read, and also we missed the toot about last week.
In short:
- F-Droid client 1.21 was released, but you should wait for 1.21.1 before you update
- there were some bugs in DAVx⁵, Nextcloud and Tailscale, so be careful in updating these too
- we're working together with @Codeberg to get our builds from apps hosted there working again
- any much more
Read the full details at
f-droid.org/2024/10/24/twif.ht… and f-droid.org/de/2024/10/17/twif…
This Week in F-DroidTWIF curated on Wednesday, 23 Oct 2024, Week 43F-Droid coreJust after the last TWIF was published we thought it will be just another nice...f-droid.org
🎉 PSA: F-Droid users! 🎉 The Tuta Calendar app is now available on F-Droid 🥳
❤️ You can get the Tuta Calendar app here: f-droid.org/en/packages/de.tut…
#Fdroid #Tutacalendar #Tuta #Download #Encryption
Quantum-safe encrypted planner to schedule & manage your events & sync calendarsf-droid.org
#Repology only has marginal support for F-Droid, only seeing a few handpicked packages for software which is also available in Linux:
repology.org/projects/?inrepo=…
I've recently had a few PRs which improve F-Droid support and add #IzzyOnDroid, allowing full-fledged version comparison within Android ecosystem.
I wonder if any #fdroid maintainers or @IzzyOnDroid would be interested in that.
Pixelfed for Android (v1.0.0.70) is now available via our F-Droid repo!
Our Google Play build is pending approval, and is expected to be available within the next 24 hours.
ArcaneChat (previously known as #DeltaLab) an alternative Delta Chat client for #Android is now available in official F-Droid store!
If you already have it you can securely continue to upgrade it now from F-Droid (or #IzzyOnDroid) thanks to #ReproducibleBuilds which ensures the apk matches the source code and not me nor F-Droid is manipulating the binary 🎉
f-droid.org/en/packages/chat.d…
#encryption #decentralization #anonymous #email #ArcaneChat #DeltaChat #fdroid
If you think about participating on this year's #Hacktoberfest you might wish to visit Droidtoberfest:
droidtoberfest.sylviavanos.nl/
@SylvieLorxu wrote up a nice webpage listing up which apps from #IzzyOnDroid and #FDroid are participating and welcome your contributions 
This is what hides Organic Maps from F-Droid search by default?
Really?
A hotel widget to fucking kayak dot com and... the download server for maps? Yikes.
That sucks, F-Droid. Arguably the kayak.com thing is funny, yes, but... The maps CDN? :(
Viele meiner Patientinnen notieren ihren Zyklus im Kalender. Manche benutzen auch Apps.
Falls ich dafür auch eine App benutzen wollt, empfehle ich euch dringend keine aus dem GooglePlayStore, denn die enthalten alle Tracker und sind unzuverlässig. Außerdem wollen wir unsere intimen Gesundheitsdaten nicht durch die Welt posaunen.
Also, falls ich eine App dazu benutzen möchtet, kann ich "Drip" aus dem F-Droid Store empfehlen.
Projektseite:
prototypefund.de/project/drip/
F-Droid Store:
f-droid.org/de/packages/com.dr…
Drip bei Mastodon:
@dripapp
P.S. Falls ihr generelle Fragen zum F-Droid Store habt:
mobilsicher.de/ratgeber/so-ins…
Oder mich fragen.
#frauen #periode #zyklus #menstruation #fdroid #dripapp
Sie möchten F-Droid ausprobieren? Wir zeigen in einer Schritt-für-Schritt-Anleitung mit Screenshots, wie man den App-Store herunterlädt und auf dem Smartphone einrichtet.Inga Pöting (mobilsicher.de)
Dear @IzzyOnDroid , I have seen this many times since I started using #fdroid (..and your #repo).
At the screenshot you see an app last updated 7 years ago and a note stating that IT SEEMS to be no longer maintained. For me, its abandoned and unless you have metrics that show active users, why bother keeping the app at all?
🇬🇧 Finally we're live with a new set of features! More than 18% of the apps at IzzyOnDroid already have Reproducible Builds – that's more than 1 out of 6, and more will follow. Two wonderful clients will make this and more transparent for you soon. Read about all the exciting news in this article: android.izzysoft.de/articles/n…
All this was made possible thanks to the help of @obfusk – and her github.com/obfusk/rbtlog
#IzzyOnDroid #reproducibleBuilds #FDroid #transparency
Exciting news at the IzzyOnDroid repo! Now we have Reproducible Builds, specific support by some of the most popular F-Droid clients, and more!IzzyOnDroid
🇩🇪 Schluss mit der Rumeierei – jetzt ist es Live! mehr als 18% der Apps bei IzzyOnDroid verfügen bereits über Reproducible Builds (also mehr als jedes 6. Ei – oops, jede 6. App; mehr folgen). Zwei wundervolle Clients werden Euch dies und weiteres transparent machen. Das & weitere spannende News könnt ihr hier nachlesen: android.izzysoft.de/articles/n…
All dies war nur möglich Dank der Hilfe von @obfusk – und ihrem github.com/obfusk/rbtlog
#IzzyOnDroid #reproducibleBuilds #FDroid #transparency
Spannende Neuigkeiten im IzzyOnDroid Repo: Jetzt haben wir reproduzierbare Builds, spezifische Unterstützung durch einige der beliebtesten F-Droid-Clients und mehr!IzzyOnDroid
#NewPipe 0.27.2 is out now!
This version fixes the recent issues with YouTube and Bandcamp. Support for on.soundcloud.com URLs was also added.
The new version is available through our #FDroid repo (newpipe.net/FAQ/tutorials/inst…) and should be shipped with F-Droid's main repo in the next days. The in-app updater should offer the update within one hour.
🚗 
Passando a utilizar este aplicativo para gerenciar despesas do automóvel com a tornozeleira eletrônica de bolso #Android: Autu Mandu é #SoftwareLivre (licença Apache 2.0) e está disponível, entre outros, no repositório do @IzzyOnDroid para #FDroid.
github.com/juanro49/autu-mandu
Vamos ver como se sai, mas parece ótimo. Usei por muitos anos outros privativos de liberdade, então aproveito para iniciar a gestão de novo veículo finalmente dando basta nessa privação.
Mais alguém o conhece?
Autu Mandu te permite controlar ingresos y gastos de tus vehículos y mostrarlos en bonitos informes. - juanro49/autu-manduGitHub
Hey @fdroidorg, how about we replace the "Non-Free Network Services" flag with two more specific Anti-Feature flags; "Non-Changeable Network Services" and "Proprietary Network Services";
forum.f-droid.org/t/propsosal-…
#SoftwareFreedom #Android #FDroid #AntiFeatures #NetworkServices
I’d like to propose splitting the “Non-Free Network Services” flag into two separate Anti-feature flags; “Non-Changeable Network Services” and “Proprietary Network Services”.F-Droid Forum
I participated in the #OsmAnd anniversary quiz and now I've won 3 months of OsmAnd pro... Except that:
- I don't need it, as I use the full version from #FDroid
- despite that, I somehow still pay a monthly fee to them. (I'm actually not sure who pays that bill though 🤷 )
In other words, send me a PM if you want three months of OsmAnd Pro.
The manual on how to activate is here: osmand.net/promo/manual/#engli…
You'll need either an Apple or Google account for this.
#NewPipe update: version 0.27.0 is available
🆕 comment replies
🆕 playlist descriptions
🆕 re-order custom playlists
🆕 reset settings
↗️ improved download checks
↗️ ask for consent before checking for updates
↗️ UI improvements
↗️ various player improvements
🐛 [YouTube] fixed comment extraction
🐛 [YouTube] fixed access to some streams
🐛 fixed crashes
🐛 fixed insecure backup import
The update is available through our custom #fdroid repo: newpipe.net/FAQ/tutorials/inst…
It's pretty unsavory how everybody talks about #MarketPlaces when it comes to platforms for distributing apps. I guess because of #DMA. But it's important to take a step back once in a while and appreciate that like many other #FOSS platforms #FDroid is not a maket place, it's a #commons.
We have a new This week in #FDroid (TWIF) post.
Thanks to the EU's DMA, 3rd party stores will get more love and treated more equally than before.
Tailscale is doing a redesign, until that's done we've released the crash fix update.
Conversations and Quicksy have their 10th anniversary and celebrate with a design update.
Last but not least, we had 10 new and 160 updated apps this week.
f-droid.org/2024/04/18/twif.ht…
TWIF generated on Thursday, 18 Apr 2024, Week 16F-Droid coreUpdate 1.20.0-alpha1 added “tighter integration with the unattended updates code for Android 14 a...f-droid.org
As Snikket is still not available on the #Google Play Store, we've published a longer blog post about the situation, how to work around it using #FDroid, and the long path of stupid Google review responses that led us here.
snikket.org/blog/snikket-googl…
Google have removed the app, citing lack of a privacy policy. This post provides details and a workaround.snikket.org
Just a heads-up that #Snikket #Android has been pulled by #Google from the store. We'll work on restoring it once we figure out their (as usual) nonsensical complaints. Apologies to everyone affected. Please look at #FDroid and free yourself.
Today's excuse for delisting yet another #XMPP app?
"Your app is uploading users' Image information without posting a privacy policy link or text within the Play Distributed App."
Funny. What's this then?? 👀
All I'm asking is for #ResponsibleDisclosure. The tone you sense was my panic as I scrambled to figure out the proof-of-concept to ensure that #FDroid users are kept safe. Signature verification is a key part of that. I cleared my schedule this morning to deal with this.
Thanks to @obfusk to doing the hard work of the proof-of-concept and the patch. I posted my preliminary analysis of the issue on gitlab.com/fdroid/fdroidserver…
1/2
Take a look at apk_signer_fingerprint(): def get_first_signer_certificate(apkpath):...GitLab
Three years ago, #FDroid had a similar kind of attempt as the #xz #backdoor. A new contributor submitted a merge request to improve the search, which was oft requested but the maintainers hadn't found time to work on. There was also pressure from other random accounts to merge it. In the end, it became clear that it added a #SQLinjection #vuln. In this case, we managed to catch it before it was merged. Since similar tactics were used, I think its relevant now
gitlab.com/fdroid/fdroidclient…
The search results are pretty unusable currently. So I've changed it to show apps in this order: App name matches keyword, summary matches keyword, description matches keyword. Also,...GitLab
Hello, world! I am Sena! I am honored to meet you! You can find more about me here!moooon.dresden.network
We are happy to announce that DAVx5 4.3.15 is now available (also on #fdroid @fdroidorg).
* Great parts have been rewritten to Compose and (will be finalized in 4.3.16)
* We've changed how we use various sync types, resulting in much less used system sync quota. This means a much more reliable scheduled background sync. Hope you enjoy the new version! 😀
Changelog: github.com/bitfireAT/davx5-ose…
What's Changed Rewrite WebdavMountsActivity to Compose by @ArnyminerZ in #607 Rewrite AccountActivity to Compose by @rfc2822 in #617 Rewrite PermissionsActivity, PermissionsFragment to Compose by @...GitHub
