• 3 Posts
  • 16 Comments
Joined 5 years ago
cake
Cake day: January 21st, 2021

help-circle

  • The fact that devs sign the builds doesn’t protect you from a Jia Tan type of actor. Jia Tan had social-engineered they way to a maintainer and then dropped their backdoor in the .tar releases. If you had compiled from the tree you couldn’t be affected. It’s possible to fail to review malicious commits even in this case, but it is still more transparent than pre-packaged releases. And there’s no point to reproducible builds if no one actually reproduces them.





  • Netguard also has a separate lockdown mode (which only enables a few apps, or none, to go through) that if toggled automatically based on connected network would enable you to dictate which apps can use untrusted networks.

    While there are lots of apps that automate some sort of action based on the name of the WiFi network, activating the lockdown mode in Netguard is more specific, and I doubted if it’s even possible. To start, I came up with a Termux command invocation that toggles the lockdown mode in Netguard. After customizing the quick settings (near the notification area) this adb command confirms that this method for toggling Netguard’s lockdown mode really works:

    adb shell cmd statusbar click-tile eu.faircode.netguard/.WidgetLockdown
    

    Default Termux doesn’t request the necessary permission which impeded the command from running, however:

    java.lang.SecurityException: StatusBarManagerService: Neither user 10472 nor current process has android.permission.EXPAND_STATUS_BAR.
    

    So this is where I’m at, I could probably just use Tasker to like some people do to run the cmd statusbar command, but I also wanted to call some attention to the issue report on the Termux repository regarding this permission.

    EDIT: There’s a high likelyhood it won’t work on Tasker without root, and on termux it also wouldn’t work even if you managed to request the permission.


  • For the record, in almost all versions of Android you can install apps in a isolated environment through Shelter. Apps in this environment get icons in your home screen just like the rest, but don’t share the vpn/firewall connection that you might have active through RethinkDNS, among other things.

    You effectively have two sets of apps with different firewall settings. And if you figure out a way to automate the locking down of RethinkDNS (through something like Tasker or Schröder’s Automation,) you would effectively have a mechanism that only lets the small number of apps in the isolated environment work while connected to an untrusted network.













  • A service like letterboxd, myanimelist, and goodreads, that unifies all these mediums and more, into one single media tracking site with individual user profiles and off that, on the side, some social-networking. As of today, there’s no site for tracking ALL media, rather only many sites focused on a single medium, each with ad-hoc databases and different UI:

    • Film (IMDB, letterboxd)
    • Anime (myanimelist, anilist, kitsu)
    • Games (mobygames, glitchwave?)
    • Literature (goodreads, bookwyrm (federated!)
    • Music (rateyourmusic, …)

    If I’d just like to keep track of media I consume I can just keep one big offline spreadsheet, but what I enjoy of these services is the ability to make friends with similar tastes and being introduced to amazing art through personalized recommendations, that I otherwise would’ve never known about.

    Apart of being fragmented, most of the aforementioned available media tracking services sell user’s data and are proprietary. I guess I’d like to see something like bookwyrm, but with a larger scope than just books. Maybe integration with Wikidata is the only viable solution for the herculean scope of cataloguing every media release that ever existed. Not sure how this would turn out in practice, but Wikidata could benefit too, from having legions of people adding info on their favorite obscure shows.