Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update F-Droid Security Issues #233

Open
wants to merge 29 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
7994a7e
Make wording and grammar changes in intro and part 1
friendly-rabbit-35 May 18, 2024
f62a0db
Update parts 2 and 3
friendly-rabbit-35 May 18, 2024
1220ba7
Update parts 4 and 5
friendly-rabbit-35 May 18, 2024
8b89a53
Update part 6
friendly-rabbit-35 May 18, 2024
01491f8
Update Conclusion and Meta
friendly-rabbit-35 May 18, 2024
eeffedf
Move block quote
friendly-rabbit-35 May 18, 2024
62cc552
Reword sentence and embed link to Aurora token issue
friendly-rabbit-35 May 20, 2024
efa170a
Update status of F-Droid index v2
friendly-rabbit-35 May 20, 2024
2b7b329
Overhaul section about F-Droid clients
friendly-rabbit-35 May 20, 2024
166b2cf
Update status of unattended updates and test slightly different updat…
friendly-rabbit-35 May 20, 2024
1278dda
Reword paragraph for clarity
friendly-rabbit-35 May 20, 2024
73e6589
Rearrange sections for better flow
friendly-rabbit-35 May 20, 2024
f25f6a1
Rearrange more sections
friendly-rabbit-35 May 20, 2024
2662515
Add "last updated" tag to Android EOL description
friendly-rabbit-35 May 20, 2024
6b25f06
Italicize update tag and clean up wording
friendly-rabbit-35 May 21, 2024
7ababba
Update F-Droid section in Android Tips post
friendly-rabbit-35 Jun 11, 2024
d162483
Add Snikket case to post (WIP)
friendly-rabbit-35 Jul 9, 2024
2d708bf
Clean up wording
friendly-rabbit-35 Jul 9, 2024
bf3d044
Reword paragraph about F-Droid's "quality control"
friendly-rabbit-35 Jul 9, 2024
404f0fb
Finish Snikket case study
friendly-rabbit-35 Jul 9, 2024
31ed822
Reword
friendly-rabbit-35 Jul 9, 2024
a738834
Embed link to relevant section of PrivSec post on FLOSS Security
friendly-rabbit-35 Jul 9, 2024
d05701c
Add section about F-Droid not using basic network security practices …
friendly-rabbit-35 Jul 16, 2024
68f831d
Move section for better flow of ideas
friendly-rabbit-35 Jul 16, 2024
7c3da23
Clean up wording in new section
friendly-rabbit-35 Jul 17, 2024
9147338
Clarify cert pinning in Play Store (addresses https://github.com/Priv…
friendly-rabbit-35 Jul 22, 2024
ceaa66d
Mention security metadata in clarification about Play Store cert pinning
friendly-rabbit-35 Jul 23, 2024
dac5f11
Add qualification
friendly-rabbit-35 Jul 23, 2024
a348371
Change wording
friendly-rabbit-35 Jul 24, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion content/posts/android/Android Tips.md
Original file line number Diff line number Diff line change
Expand Up @@ -176,7 +176,7 @@ My recommendation is to stick with the Google Play Store unless your threat mode

F-Droid, despite being often recommended in the privacy community, has various security deficiencies. You can read more about them [here](/posts/android/f-droid-security-issues/).

I do not recommend that you use F-Droid at all unless you have no other choice to obtain certain apps. In some rare cases, there may be some apps which require the F-Droid version to work properly without Google Play Services. If you do end up using F-Droid, I highly recommend that you avoid the official F-Droid client (which is extremely outdated and targets API level 25) and use a more modern client with seamless updates such as [NeoStore](https://github.com/NeoApplications/Neo-Store). You should also avoid using the official F-Droid repository as much as possible and stick to the F-Droid repositories hosted by the app developers instead.
I do not recommend that you use F-Droid at all unless you have no other choice to obtain certain apps. In some rare cases, there may be some apps which require the F-Droid version to work properly without Google Play Services. If you do end up using F-Droid, I highly recommend that you avoid the official F-Droid client (which is extremely outdated and targets API level 29) and instead use [F-Droid Basic](https://f-droid.org/en/packages/org.fdroid.basic). You should also avoid using the official F-Droid repository as much as possible and stick to the F-Droid repositories hosted by the app developers instead.

### GitHub

Expand Down
Loading