Email or username:

Password:

Forgot your password?
F-Droid

Unlike Google, F-Droid does not force developers to publicize their name or address information.

We understand that people have many reasons to develop under another name than their legal one and to keep their personal information private. And that what matters is the trust between user and developer, not private details of their lives.

For more information on how we designed F-Droid to protect your privacy, see f-droid.org/2022/02/28/no-user.

35 comments
kgbvax

@fdroidorg And how would anonymus "trust between user and developer" work?

FC (Fay) 🏳️‍🌈

@kgbvax @fdroidorg The same way it works in the FOSS ecosystem and for many F-Droid contributors and app developers already.

void *anna;

@kgbvax @fdroidorg if a user already knows me as navi, and trust me as navi, why would they (against my will) knowing my legal name, help with anything? the repository will still be navi/project-name, the emails on the commits will still be my own (with navi in it, not my legal name), etc etc

piegames

@kgbvax @fdroidorg It's not anonymous, it's pseudonymous. Now tell me, how does which one of the names of a developer you know make a difference?

Aroop Roelofs :verified:

@kgbvax The same way it goes with basically any software: "This dev has a good reputation, I'll "trust" them"

Note I put "trust" between quotation marks.
You should *never* blindly download an app from any store anyways.

@fdroidorg

LastContinue

@kgbvax @fdroidorg Really well, especially for watching YouTube without ads.

Lucifer

@kgbvax
You have access to the source code of the app and the libraries it uses. That's all you need.
F-Droid does not allow code that is not open source
@fdroidorg

cyplo

@kgbvax @fdroidorg as per usual, we trust group names and handles and the work they represent. I trust AssLicker69 much more than Google to develop software that does not spy on me for example

Felix Urbasik

@fdroidorg Any news on unattended installation of updates? If #FFUpdater can do it then you can too :)

magmaus3

@fell@ma.fellr.net @fdroidorg@floss.social possible with f-droid privileged extension, and (afaik) f-droid basic might be able to do that as well

m0xEE

@fell
It IS supported, F-droid app just needs a helper service for privilege escalation to do it, check this out: f-droid.org/en/packages/org.fd
I'm currently using other app with F-droid that requests privilege escalation from Magisk, but that helper service worked for me in the past, you have to install it to your system partition with something like TWRP and voila!
@fdroidorg

Hawkmoon

@fdroidorg

Just researching it.

Its based on Android 7.0, which is already 6 years old?

m0xEE

@Hawkmoon
What is? It's just an alternative repo ("store") for opensource apps — stock app is not the only way to access it, here is the app I use: f-droid.org/en/packages/com.ma
Works just fine on Android 12.1
Most apps have lower minimum API level on purpose so that users of older releases of Android can use them too, it has nothing to do with being insecure or based on old code, modern versions of Android are backward compatible with older APIs.
@fdroidorg

Hawkmoon

@m0xee @fdroidorg

Oh, I see. Some guy on YT was calling it unsafe.

Pushing people to use something called Droidify.

I learned about all of this today, so. I don't really know that much.

I just wanted to see your comments on his claim would be.

m0xEE

@Hawkmoon
Well, it is less safe *in theory* but for other reasons — just because you have allowed apps to be installed from one more source, other than Play Store.
It all boils down to whom you trust more, I don't trust my phone's maker so I use an alternative ROM, bootloader of my phone is unlocked — which is a huge security no-no. I also don't really trust Google so my ROM doesn't have Play Store or Play services installed.

@fdroidorg

@Hawkmoon
Well, it is less safe *in theory* but for other reasons — just because you have allowed apps to be installed from one more source, other than Play Store.
It all boils down to whom you trust more, I don't trust my phone's maker so I use an alternative ROM, bootloader of my phone is unlocked — which is a huge security no-no. I also don't really trust Google so my ROM doesn't have Play Store or Play services installed.

m0xEE

@Hawkmoon Experts talk about security all the time, but most users don't even follow security best practices and no amount of security measures built into their phone will make them 100% secure. I know that is I lose my phone, in theory, it would be possible to retrieve all data off it — and it's always best to assume that because it's a matter of how much effort one is willing to put into accessing your data: petty thief doesn't care about it at all, he just wants the device itself…

m0xEE

@Hawkmoon …and even full disk encryption won't make it secure against 3 letter agencies.
So… I just don't store any sensitive data on my phone😂
And I know that if I lose it, I'd have to change passwords to all accounts I've been using on it — that's it.
As for remote exploits — no, using F-droid or AOSP-based ROM doesn't make you less secure — as code is open, it gets audited by security researchers all the time, if some serious vulnerability gets discovered, it gets fixed in opensource SW too.

bullmousse

@Hawkmoon Nothing unsafe about it. They ban extremist apps like Spinster so that dangerous ideas can't infect you.

foxovision, maybe :therian:

@fdroidorg Thank you for existing, F-Droid! :blobfoxfloofhappy:​

ROllerozxa :blobthinkingeyes:

@fdroidorg As someone who has published apps onto Google Play I was horrified when I read the news that Google is requiring me to dox myself and publish my legal name beginning 31st August if I want to keep my apps up.

I've already privately sent Google my ID like all developers need to do. They know who I am, and can hold me accountable if such a need ever arises. Yet they have complete disregard for individual developers' physical safety and require this to be PUBLIC now.

Chris Rosenau

@fdroidorg Personally that sounds horrible. I will stick with the official app store.

Hawkwinter

@floweringmind @fdroidorg

I've used both. The google one was more convenient. But I can see how a lot of people dont want their personals published for literally anyone in the world to see.

Google's new policy is a serial killer or stalker's wet dream.

I certainly would not publish anything to the play store under this new serial killer facilitation policy.

Zoe :rainbow_infinity:

@floweringmind@mastodon.social @fdroidorg@floss.social If book authors can use a pseudonym why shouldn't developers? Why do you expect developers to dox themselves just so you can enjoy the result of their labour? You are completely within your rights to choose to use Google but I just see no reason for thinking that developers not being required to dox themselves sounding horrible.

Frost「:therian:|霜の狼|人面獣心」

@Wbud @fdroidorg I mean yeah? That's an "if you're writing the code for the service itself" and such, and has nothing to do with just /using/ it.

Wilhelm

@frost @fdroidorg I have no opinion on the topic. The contradiction caused by inaccurate generalizations amuses me.

Nazo

@fdroidorg It's not like it works anyway. There have been a lot of apps that were taken over through third party acquisition after the fact which avoids stuff like this. (Actually, from what I read Apple has a similar problem with this issue as it's really just kind of a platform mechanism issue.) I imagine some provide fake details anyway. Forcing a lack of privacy honestly isn't very helpful.

Lots of stuff from Github make it to F-Droid. Usually more up-to-date at that.

Tuncay

@fdroidorg On my degoogled phone, F-Droid is my main source for apps.

DELETED

@fdroidorg F-droid is just all around pretty dope!

Hawkwinter

@fdroidorg

Does f-droid have the ability for developers to get paid, or is it only a free software repo?

uvok

@Hawkwinter @fdroidorg you can put up a donation link in the app description / metadata file in the fdroid store

Go Up