#MagicEarth as online SatNav, #OSMAnd as offline navigation. For train/bus #Offi. If I search for a chippie or something, #gmapswv . All of them available at #FDroid store
Three years ago, #FDroid had a similar kind of attempt as the #xz#backdoor. A new contributor submitted a merge request to improve the search, which was oft requested but the maintainers hadn’t found time to work on. There was also pressure from other random accounts to merge it. In the end, it became clear that it added a #SQLinjection#vuln. In this case, we managed to catch it before it was merged. Since similar tactics were used, I think its relevant now
Steiner wrote this week that the original coder deleted their account as soon as F-Droid’s maintainers attempted to review the code, and that he thinks that the user’s behavior, as well as “all the attention from random new accounts” has led him to believe “it could be a deliberate attempt to insert the vuln.”
This is pretty significant: the first documented case of these tactics being used to insert a vulnerability, apart from xz. So probably the same actors have been trying this on multiple projects.
I hope other maintainers who have experienced similar pressure tactics will come forward, even if they’re not aware of any backdoors. For any project where this has taken place and the code was merged, the code and commit history needs to be audited.
My 9yo daughter has a tablet with family link, so I can monitor what apps she wants to install. As the garbage games are mostly at the top free, she keeps asking for games that I reject, in most cases because it’s riddled with ads....
Also I don't know anything about adblockers but I was lucky enough to have a device supported by www.divestos.org and I think the OS defaults to a DNS that ignores ads somehow. But I'm not sure! I just know I get WAY less spammy ads than friends do :P
Alternative to Google maps?
Are there any good apps to use as a replacement for google maps? It’s the only google service I’m still using.
Bullying in Open Source Software Is a Massive Security Vulnerability (www.404media.co)
How to let my kids find quality games on Android? Right now they only find the pay to win / ad riddled games.
My 9yo daughter has a tablet with family link, so I can monitor what apps she wants to install. As the garbage games are mostly at the top free, she keeps asking for games that I reject, in most cases because it’s riddled with ads....