Notices by j@mastodon (jcast@mastodon.social)

@tanavit @lienrag @sebsauvage

Oaui...
https://developers.cloudflare.com/waf/detections/leaked-credentials/

US 2014: Go Ukraine, free yourself from your evil oppressors. Here's some literal cookies. F*ck the EU.

US 2025: Ukraine get stuffed and give us the spice. EU you deal with the mess now. Buy more of our wonderful weapons and gas.

This is commonplace US foreign policy, seed the chaos, let others handle it while we pivot to the next war, let corporations do their thing. Didn't start with Trump.

@guenther @GrapheneOS

Yep its a great app, verifies signatures and all.

@idkrn

Some filters are better than no filters.
Not downplaying their shortcomings either.

@GrapheneOS
To clarify, I'm not using GOS, but another AOSP based OS.

Maybe GOS is more has more explicit permission model, but my issue is with WG, not GOS in any case.

@GrapheneOS

So, despite the shortcomings of the FDroid team, I wouldn't be any wiser with regards to this without their efforts.

@GrapheneOS

This process is completely opaque to the user, and no, an explicit permission for background updates is not requested at any point either by the installer or by the app itself.

@GrapheneOS

In practical terms, this means WG installs from FDroid, using Izzy repo updates without ever requesting user permission for background updates.

So it really sounds at this point you're purposedly misleading and obscuring this fact.

@GrapheneOS

Makes sense thanks for clarifying.

@GrapheneOS

I find WG behavior a concern in terms of both security and privacy.

@GrapheneOS
Sure that shows two things:

- FDroid review system is to say the least flawed.
- Given that the new WG version on Izzy's repo does not even prompt the user for opt-out bg updates, WG chooses to be opaque, which I find concerning.

@GrapheneOS

You're replying to me as if I was defending Izzy.
I'm not, I see things got ugly.

But you're still choosing to go down the path of attacking him instead of replying to a legitimate concern about Wireguard's choices.

@GrapheneOS

I wasn't aware of that privacy vs. security controversy.

I'm in no way affiliated with FDroid and am seriously taking notes of your concerns and criticism.

I also appreciate your availability to communicate so transparently, and usually in a very mature way.

Just noting two things here: Wireguard opaque attitude, and you not replying to that concern.

@GrapheneOS

I've read Izzy's comments on several forums for many years now, and I never witnessed nothing but either praise or constructive criticism of GOS.

Your mileage might vary, but from my perspective it just sounds you're each fiercely defending your ground. GOS focusing on security and FDroid on the 4 freedoms.

@GrapheneOS

You replied to my comment on Wireguard choosing very deliberately to hide background updates from users with an adhominem on Izzy.

Not taking his side, and understandably you have removed your trust from them, but this doesn't look good on you.

@idkrn

Well I understand the standards are low with FDroid, but I still think most people are better off with their curation than using random apps from the internet.

@GrapheneOS

This looks as ugly for WireGuard than for F-Droid.

WireGuard current app on Izzy repo for F-Droid does not tell users where it's updating from, does not ask for consent and it's opt-out. So there were clearly not happy about letting users know.

Not to diss WireGuard which is course an awesome project.

A growing number of Izzy repo apps are reproducible builds.

@GrapheneOS

Oh and btw

avg 4d 1h 49min 3s
max 1w 18h 51min 8s
min 22h 19min 51s
https://gitlab.com/ironfox-oss/IronFox/-/issues/7

@GrapheneOS @Kulei @newhinton

Obtanium just allows you to install any random app from a git page.
Super dismissive of the work FDroid puts into curation, however faulty it may be.

@GrapheneOS And suggest avenues for resolutions of these differences.