The Boost android client for Lemmy is displaying these dark pattern ads pretending to be system notifications. What security/privacy conscious Lemmy clients do you recommend?
You're viewing a single thread.
I start with whatever is on F-Droid, and narrow it down from there.
Jerboa was the only option there until recently. I see Voyager and Eternity are there now. I'll have to give them a try.
Voyager is currently many versions ahead of the one listed on F-Droid. It is still usable but you may want to get the latest version from GitHub.
If new versions don't make it to F-Droid, they might as well not exist for me. There are only a couple of apps that I find important enough that I'll spend time manually building/pulling/installing, and a Lemmy reader isn't one of them. Thanks for the tip, though.
Have you considered using https://github.com/imranr98/obtainium You give it the repository of the app and it will handle checking for new versions and updating them
Part of what I value in F-Droid is the additional layer in the build/release process, because it makes tampering more likely to be detected.
It's still nice to know a tool like obtanium exists, though. Thanks for the link.
This is exactly the reason why I don't like F-Droid as a way to get apps. You'll have to trust an additional party when getting your apps, and updates are often a couple days behind. I prefer to get it straight from the developer's GitHub or Coderberg or whatever.
You’ll have to trust an additional party when getting your apps, and updates are often a couple days behind.
I know how it works, and in this case, that's fine with me.
F-Droid has an excellent track record; better than many developers have. And I'm not addicted to having the latest versions of everything on the day they're released. In fact, not immediately jumping on the latest versions has saved me from nasty bugs more than once.
Part of what I value in F-Droid is the additional layer in the build/release process, because it makes tampering more likely to be detected.
Barely and not really. "F-Droid can’t ensure the apps are safe. You still need to trust the upstream developers. We only do some basic check." https://forum.f-droid.org/t/is-it-as-safe-as-it-is-from-fdroid-official-repo/15956/2
N + 1 > N
N + X - Y ? N
Except now you're adding an additional party to trust (the -Y). So it could still be considered less secure than N.
So it could still be considered less secure than N.
It could be, or it could not be. Depends on the particulars, and on the needs of the individual.
Mind, I'm not going around presuming to tell other people what's better for them, as one or two others in this thread are doing. I'm just stating what's a good fit for me.
Depends on the particulars, and on the needs of the individual.
That's not really how things like security works. It's either more secure or it's not. The security of a thing does not depend on needs. Now, does the application of it or does someone need it to be more secure? That's where risk acceptance and the needs of the individual come into play.
I'm not going around presuming to tell other people what's better for them, as one or two others in this thread are doing.
Same. I'm not saying "stop doing this." I'm just trying to educate people and make sure they're not operating with a misunderstanding. Needs of the individual and all that. I think some people just go crazy for something that's not big tech, and then quit looking at the particulars.
Depends on the particulars, and on the needs of the individual.
That’s not really how things like security works.
If that were true, threat modeling wouldn't exist. ;)
I think some people just go crazy for something that’s not big tech, and then quit looking at the particulars.
I expect that's probably true. It's safe to assume I'm not one of them, though. Cheers.
thunder is awesome too
Eternity FTW
I'm not sure why people insist on F-Droid, considering the F-Droid Security Issues.
I use it because, contrary to what that scare piece you linked would have the reader believe, it's better for my needs than the alternatives.
(I'm no stranger to software development and security, by the way. I understand the pros and cons.)
that scare piece you linked would have the reader believe
So an indepth and critical analysis of something is now a "scare piece?" Ok.