• 0 Posts
  • 39 Comments
Joined 3 years ago
cake
Cake day: July 23rd, 2023

help-circle



  • I still haven’t gotten to give it a full proper go. But Toolbx is designed to assist with development on immutable OSs. Let’s you do regular package installs for all the various Dev tools into a container. Can either install your IDE into the container and run it like a regular app, or use an IDE with built-in Dev Container support.






  • Signal uses Play Services for its push notifications. It does have a fallback method which maintains a connection to their servers to get message notifications. It requires changing some battery optimisation settings which might have some minor battery impacts.

    Personally I’m using Molly which implements UnifiedPush for Push Notifications without Molly/Signal needing to run in the background constantly. Also swaps a few other Google dependencies (like location pins) with open source alternatives.

    Having the second profile with Google Services is a good idea though. That was what I used to do before I shed my last few Google dependencies.








  • dracs@programming.devtoPrivacy@lemmy.mlIs F-droid insecure?
    link
    fedilink
    English
    arrow-up
    3
    ·
    11 months ago

    I’ve seen posts by the GrapheneOS team about recommendations against using both F-Droid and Aurora. F-Droid had a decent sized list of issues they raised. One of the key ones they raised against both was that it added an extra person to trust. You always need to trust the code of the developer of the app. No way to avoid that. With F-droid you need to trust that their build system/infrastructure is serving you the app as per the developers code. With Aurora you need to trust the Aurora devs are giving you the app unmodified from Google.

    There were other criticisms on F-Droid that they sign almost all apps with their own key rather than the developers. They do offer to serve apps with the developer keys, but it’s difficult to setup and not many apps implement it. Google Play also does the same thing though, so I feel this risk isn’t that big. Generally they seem to recommend getting apps directly from developers rather than via a 3rd party. They offer Accrescent in the GrapheneOS app store which is designed for this, just pulls files from Github AFAIK.

    All that said. I prefer to get all my apps from F-Droid (NeoStore technically) and Aurora for anything without a F-Droid repo.





  • They do have e2e for emails. Any emails between Proton Mail users are always e2e encrypted, as are any emails others send you which they’ve encrypted with their own maio client. If someone sends you an email unecrypted (most email is), then Proton will encrypt it for you and put it in your inbox. They can’t read it after that, but there is some trust required that they don’t store/look at the unecrypted email before then.