• 1 Post
  • 23 Comments
Joined 2Y ago
cake
Cake day: Apr 25, 2024

help-circle
rss

I get your frustration with recent mozilla actions, but I don’t think this one deserves it. For one your point seems like whataboutism. Secondly If you heard about Cambridge analytica it should be clear how much those algorithms shape our lives. It would be good to know for me if those algorithms are really just boring algorithms or if they are shaped by some political or company agenda.



first time I hear about it, seems to be based on lineageOS?

What’s with the premium tiers? Seems a bit sketchy to be honest.


Agreed. Google just didn’t consent to you getting an app without ads. My hope is maybe we can circumvent it for a while with PWA or browser website bookmarks. Maybe long enough for alternatives to arrive or consumer protection to kick in. I refuse to give up hope even though I might need to abandon android. For now I guess I will just not buy another phone since androids time seems limited. Really hard to find something to recommend to family and friends that just works. My goto grapheneOS also seems more and more cut down with more and more apps refusing to work outside play store downloads or refusing to work on 3rd party OS.



Done! for the curious, original title, “Cirrus App dev pulling app from certified android devices in '26/'27” new, “Cirrus app dev informing the app will stop working on certified android devices in '26/'27”



First of all thank you for providing a foss app!

I think it’s a big difference if the platform tolerates you or actively wants to stop you from doing it. You got my fullest sympathy.


Well for this case in particular yes, the dev will continue to develop the app on f-droid, the platform as a whole takes a hit through this though, so who knows how long they will continue out of goodwill.

edit: Play integrity already is problematic on GrapheneOS

The largest medicare provider in germany states legislative reasons they won’t support other 3rd party OS’


Thank you for these links they are fantastic! I was aware of the procedural lock in via play integrity services and also the lockdown on side loading so that didn’t get past me, but I wasn’t aware google also wants to alienate developers now by requiring ID. It seems to me google want to now fully commercialize the platform, transforming it into the ad infested network that web2+3.0 already became. I think their plan, by alienating non commercial devs, is that all apps will run on their ad models and non without them will be left.


Opening my weather app this morning I was greeted by this warning: > Google has announced that, starting in 2026/2027, all apps on certified Android devices will require the developer to submit personal identity details directly to Google. Since the developers of this app do not agree to this requirement, this app will no longer work on certified Android devices after that time. It's the first time I hear about this, seems to be about: [Tech crunch article from august, "google will require developer verification for android apps outside the play store"](https://techcrunch.com/2025/08/25/google-will-require-developer-verification-for-android-apps-outside-the-play-store/) Cirrus app: [Github](https://github.com/woheller69/omweather) Was this a big thing I somehow missed? I hope more devs will follow suit.
fedilink



If you, a non tuta user, receive a mail from a tuta user you only get a download link. Which at least protects the content but not the metadata that someone send you an email. If a non tuta user sends a mail to a tuta user, there isn’t much tuta can do unfortunately. I’m not quite sure how you expect tuta to do magic? They do what they can.





It was good to have it as a backup. I primarily use wireguard but now its a single point of failure.



Am I missing something or is the price higher after the 2nd year?

Yearly: $500 for first year, $400 thereafter
Quarterly: $150 every three months

$600 for 3rd year?


Thanks for clearing up my WiFi mix-up. From my understanding the same attack path still applies even to https://grapheneos.org/features#lte-only-mode and respectively https://grapheneos.org/usage#lte-only-mode correct?

https://en.wikipedia.org/wiki/International_Mobile_Subscriber_Identity states the phone would send a https://en.wikipedia.org/wiki/Mobility_management#TMSI most of the time? But your point about the IMEI still stands. So there is no real way to protect yourself other than to turn off cell tower roaming?


Right, that’s what I understood. So using a VPN, a CSS will be able to identify that my phone is active, but not the content I’m accessing, or who I am accessing it from, correct?

From my understanding your statement seems correct, but it’s also lacking a bit. Unless you also randomize your mac address (grapheneOS does this) they can still map your position and visiting times. Additionally not all of your phones data goes through the VPN, something like a phone call/SMS isn’t encrypted unless you’re using an app to make the call.

The previous comment said VPNs do nothing against this type of attack- were they just referring to identifying your device?

Yes, they are thinking of a VPN as a privacy tool, not strictly as a security tool as in your example. Privacy will be compromised.


That’s not how a VPN works. A VPN masks the information you are actually accessing by showing you query the VPN instead. To make a connection to a service you still need an address. This info is what they are using to identify your device.

Most traffic is already encrypted (httpS) so someone spying on you wouldn’t know the content of your communication only who you contact. But without a VPN a man in the Middle could see who you are contacting. E.g. looking up pornhub. With the VPN it only shows you looking up the VPN.