Caretaker of Sunhillow/DS8.ZONE. Free (Libre) Software enthusiast and promoter. Pronouns: any

Also /u/CaptainBeyondDS8 on reddit and CaptainBeyond on libera.chat.

  • 0 Posts
  • 33 Comments
Joined 4 years ago
cake
Cake day: March 27th, 2021

help-circle



  • This might be a hot take but the best way to avoid or “bypass” onerous things like the “integrity API” is to opt out of the proprietary world as much as possible. Use exclusively free (Libre) software and technology where you can.

    We should not be thinking in terms of how do we get proprietary crapware onto our free systems, because that defeats the purpose of a free system. The idea is to build an alternative to the proprietary world.



  • From a technical or legal perspective, copyright infringement is not theft. The relationship a copyright holder has with a work is of a completely different character than actual ownership. See Dowling v. United States (1985).

    Whether or not “AI” training constitutes copyright infringement is, as far as I know, still up in the air. And, while I believe most of us can agree that actual theft is unethical, the ethics of copyright infringement are as far as I know also very debatable.

    Disclaimer - not an uncritical supporter of “AI.”


  • I think F-droid is woefully misunderstood especially in privacy circles.

    The main benefit of F-Droid is that it works (as best it can) to guarantee software freedom. This means, for each app, you can be assured it is under a free software license, built from corresponding source code, and contains no proprietary components. F-droid has an inclusion policy that forbids proprietary blobs and they have to build everything from source in order to ensure that - however, if the app is reproducible, F-droid can actually verify that the already built app from the developer satisfies the inclusion policy without needing to sign its own builds, which is ideal. It’s important to note that without building from source, there is no way to guarantee that the source corresponds to the binary, which is important for exercising the four freedoms.

    I don’t agree with everything F-droid does and I don’t think F-droid is perfect. The security folks have a few valid points, I think, but they fail to offer a solution that solves the same problem that F-droid does, either because they misunderstand what problem that is, or simply do not care about it. F-droid is not an app store, it’s a community-maintained distribution like a GNU/Linux distribution. App stores are not alternatives to F-droid and serve different problems. There is, as far as I know, no other project that attempts to serve the same purpose as F-droid.





  • I feel like there’s a lot of FUD around this subject, because people bring it up as if it’s purely a negative without talking about the reasons why it’s done the way it is. The whole point of F-Droid is that it’s a repository (not a store) of free software applications. They have an inclusion policy forbidding proprietary code and dependencies, and in order to enforce this policy they have to build from publicly available source code, and in order to do so they need to sign the builds themselves. This means, yes, you are trusting F-Droid instead of the upstream developer - but given F-Droid has higher standards than upstream developers this is a tradeoff I am willing to make.

    Reproducible builds solves this in a way that preserves the standards of F-Droid, however, “security peoples’” favored “alternatives” (such as Accrescent, Obtainium, and Google Play Store/Aurora Store) forego this entirely, showing they don’t either have a viable solution to offer or that they don’t really care about the problem that F-Droid is addressing to begin with.