Notices by Guardian Project (guardianproject@social.librem.one)

#Xiaomi is shipping a built-in blocklist to block the installation of apps by Application ID, no matter how they are installed, e.g. also blocks when using Unknown Sources. That list includes a number of #VPN providers #Lantern #FreeBrowser

* https://zhuanlan.zhihu.com/p/566440174

* https://web.archive.org/web/20241202062247/https://ggame.gledos.science/company/%E5%B0%8F%E7%B1%B3/MIUI.html#%E5%86%85%E7%BD%AE%E8%BD%AF%E4%BB%B6%E9%BB%91%E5%90%8D%E5%8D%95

Inspecting com.miui.packageinstaller.apk shows: no_block, white, on_shelf, off_shelf, risk, illegal_distribution, high_risk, competitive_product, forbidden, risk_anti_spoofing, risk_vpn, virus_engine

@signalapp As a supporter of #Signal, it is important to point out a key detail: Signal's own code is #OpenSource, but Signal uses multiple #proprietary libraries from #Google. Those cannot be scrutinized since the source code is not open. We believe Signal should offer an actual open source version, and are ready to help. This exists already in the fork https://fosstodon.org/@MollyIM Also, apps like #Element #Threema #Wire are #FOSS, and have #ReproducibleBuilds on @fdroidorg #FDroid

We are looking for a #Ruby #contractor to work on small #Fastlane and #Jekyll projects for #FDroid, #Android, #Mobifree and #Debian. https://guardianproject.info/2024/12/06/seeking-ruby/jekyll-contractors-to-start-asap/

We have started the second round of our partnership https://defo.ie to ensure that the new #TLS standard called #EncryptedClientHello (#ECH) works for public interest use cases. We also are working to reduce the pressure towards #centralization inherent to the #privacy improvements of hiding the domain name. You can find more details in our project announcement: https://guardianproject.info/2023/11/09/defo-developing-ech-for-openssl-round-two/

"#Google's newest proposed web standard is... #DRM?" -- Google is proposing yet another user-hostile feature and aims to make it an web standard called "Web Environment Integrity API". This lets websites confirm the browser has limitations on what it can do, going against #UserFreedom. The #IETF internet standard RFC 8890 declares "The Internet Is For End Users". Google's API circumvents that.

Thanks to Ron Amadeo for his a concise, cutting analysis:
https://arstechnica.com/gadgets/2023/07/googles-web-integrity-api-sounds-like-drm-for-the-web/