A post from the developer of #WireGuard on the severe #security flaws and lack of trustworthiness of #FDroid:

https://bsky.app/profile/grapheneos.org/post/3lgq7wqwzpk26

The Bluesky link has GrapheneOS posts explaining

https://gitlab.com/fdroid/fdroiddata/-/issues/3110#note_1613430404

Stuff here but not to the point like the Bluesky link
https://discuss.grapheneos.org/d/18731-f-droid-vulnerability-allows-bypassing-certificate-pinning/

@NoGoolag #browser #alternatives with mitigations, patches etc.
Alpha version release March 6, 2025

FireFox browser options
- Tor Browser (all)
- Mullvad Browser (Desktop)
- IronFox (Android) Read the Known Issues section on the gitlab.
- LibreWolf (mentally ill devs)

Make your own #Firefox with mitigations etc...
- Phoenix / wiki
- Arkenfox user.js / wiki / gui / user-tool / mobile
- Narsil / Narsil Mobile
- Betterfox / Betterfox Mobile
- pyllyukko
- Compare some of the user.js files

Chromium based browser Options
- Ungoogled Chromium (all)
- Cromite (Android, Linux, Windows)

Browser extensions
- uBlacklist
- uBlock Origin or uMatrix (never both)
- LibRedirect (setup your instances for each service in the settings)

Links to block lists...
- Yokoffing
- Celenity/Phoenix
- FilterLists

Set your default search engine to a search proxy
- 4get instances
- Searx instances

Why your favorite browser is not recommended
- Celenity Firefox browser comparisons
- How to choose a browser for everyday use?
- is your browser spyware?
- Choose your browser carefully
- Browsers and the connections they make compared
- Fake Privacy and security

Additional reading...
- Wiki about extensions
- Multiple Extension Conflicts
- uMatrix for beginners
- Firefox user.js install guide
- Arch Linux Firefox Privacy wiki
- Bromite (for knowledge purposes)

Testing your browser
- Fingerprint.com
- How to test browsers for spyware
- Privacytests browser comparison
- Mullvad check
- Bromite fingerprint testing
- IP Leak
- List of test sites A
- List of test sites B


* Thunderbird users should consider taking a look at Dove - Phoenix's sister project.

Flatseal

Graphical utility for #Linux to review and modify permissions from your #Flatpak applications.

Simply launch Flatseal, select an application and modify its permissions. Restart the application after making the changes. If anything goes wrong just press the reset button.

Get it
https://flathub.org/apps/details/com.github.tchx84.Flatseal

For more details please visit the documentation page
https://github.com/tchx84/Flatseal/blob/master/DOCUMENTATION.md

https://github.com/tchx84/flatseal

Obtainium

Get #Android App Updates Directly From the Source.

Tired of waiting for updates in the Play Store? Obtainium lets you install and update Android apps directly from their source (like GitHub release pages) and notifies you about new releases. Cut out the middleman and stay up-to-date!

Key Features:

*   Direct Updates: Install and update apps directly from release pages.
*   Notifications: Get notified when new versions of your apps are available.
*   Open Source: Built by the community, for the community.

Learn More:

*   Video Tutorial: Obtainium 101
*   README: GitHub
*   Wiki: obtainium.imranr.dev

Recommended Tools:

*   AppVerifier: GitHub - Verify app authenticity.

Community Resources:

*   Crowdsourced App Configs: apps.obtainium.imranr.dev

Why Use Obtainium?

See the original motivation: Side Of Burritos - You should use this instead of F-Droid | How to use app RSS feed

Project Links:

*   Website: obtainium.imranr.dev
*   Source Code: GitHub

#apk

Olivia

Online and local #music player for #Linux Desktop

https://github.com/keshavbhatt/olivia

Stable and Nightly Build on any snapd enabled Linux Distribution can be installed using:
snap install olivia
https://snapcraft.io/olivia

Arch Linux User's Repository
https://aur.archlinux.org/packages/olivia

Features
Olivia helps you discover new music and videos like no other service do.
Smart Music recommendation, can get you songs related to any song.
Allows organise music and videos at one place.
Olivia can save track while you are streaming it, this saves your bandwidth.
Olivia never stops playing song for you with its smart playlist feature it automatically starts playing related songs for you once your playlist ends.
Watch or Download Video for any song in different audio video formats and quality.
Allows search YouTube and add result to library, sort results and all other #YouTube features like browse channels.
Plays audio only of YouTube streams (saves data bandwidth).
Support themes , Dynamic theme based on album art.
Intelligent Music Search suggestions engine integrated.
Player Mini mode a minimal player widget with always on capability and allows set transparency and make it act like a desktop widget.
Switch to Smart mode and sit back, olivia will play songs for you automatically.
Internet radio, allows play more than 25k online radio stations, list them sort them according to most played , most voted, language wise, country wise and by tags .
Olivia lets you browse new music according to your location.
Olivia lets you discover music based on their genres, moods and more.
Its easy to discover new music - singles, albums etc easily at one place.
Top music chart, allows list top 100 songs country wise.
Top albums chart, allows list top 100 albums county wise.
Beautiful Client side Decoration.
Lyrics of playing songs and separate lyrics search.
Powerful audio equalizers and audio filters.
MPRIS protocol support.
Audio export with meta tags and album art.
More features like cloud synchronisation of your Liked Music is coming soon, so you will be able to get your music back no matter where you are.

#yt #spotify

Changelog : v4.7.0 (66)

• New app compatibility ratings powered by Plexus
• Improvements to blacklist manager
• Ability to change auto-update restrictions
• Minor bug fixes and improvements
• Translation updates; additional strings localized

NAPS2 - Scan #documents to PDF and more – https://www.naps2.com/

NAPS2 is free and open source scanning software for Windows, Mac and Linux.

Easily scan with devices from Canon, Brother, HP, Epson, Fujitsu, and more. Then save to #PDF, #TIFF, #JPEG, or #PNG with a single click.

#Scan #Floss

PeerTube 7.1 brings Podcast 2.0 support, enhanced identification and Mastodon verification | AlternativeTo

PeerTubePeerTube has launched version 7.1 of its open-source, decentralized video-sharing platform, introducing a range of new features and improvements. A key update is enhanced platform identification, which now highlights the hosting platform's address for each video. Users can click on this address to learn more about the video's origin and explore all videos hosted on the remote instance.

Version 7.1 also advances its support for #Podcast 2.0, enabling users to subscribe to channels and play video audio streams through traditional podcast applications like #AntennaPod and #Podverse. Additionally, the podcast feed is now compatible with Apple Podcast, broadening accessibility

PeerTube v7.1 is out! | JoinPeerTube
https://joinpeertube.org/news/release-7.1

#PeerTube

Healthy Battery Charging
https://f-droid.org/packages/biz.binarysolutions.healthybatterycharging

Healthy Battery Charging alerts you when to plug or unplug your phone from the charger to improve battery life. The app itself is optimized for low battery consumption, running in the background and checking the battery level every 15 minutes. The exact timing of these checks depends on the Android operating system, which may schedule them alongside other tasks or delay them in sleep mode. As a result, the battery level may slightly exceed the high threshold while charging or drop slightly below the low threshold while discharging before you receive a notification.


For those who want to know more about the technical details of Li-ion batteries:
https://batteryuniversity.com/learn/article/how_to_prolong_lithium_based_batteries

#Energy #Charge #Battery #LiInOnBattery

microG unofficial installer

Flashable zip created by ale5000 for a simple installation of #microG on Android.

IT FEATURE ALSO NON-AROMA LIVE SETUP (now working on all phones).

Download
microG unofficial installer v1.3.2 beta - Full (Android 2.2 - 15) - MIRROR
microG unofficial installer v1.3.2 beta - OSS (Android 2.2 - 15)
Google sync add-on v1.2.0 beta (Android 4.4 - 4.4.4 and 7 - 8, probably even newer versions)

NOTE: Devices with a MIPS CPU aren't supported.
IMPORTANT: The installer isn't supported by the author of microG so installer related bugs should be reported to me instead app related bugs should be reported there.

Contents
See here.

Official threads
microG
UnifiedNlp

Credits
MaR-V-iN (for microG, a perfect application that works perfectly also on old phones).
YashdSaraf for building BusyBox (BusyBox is used only during the installation, nothing on the device is altered).

Contributors
ale5000
Source Code: https://github.com/micro5k


Version Information
Status: Beta
Current Version: v1.3.2
Release Date: 2025-03-22

It is simpler to use, more compatible and already come with updated microG; also all optional apps can be disabled using live setup (using +/- volume hardware buttons).

You can flash it from a custom recovery (that come pre-rooted), or from a running system with "zip-install.sh". So root is only required to install, it can be removed afterward.

#installers

Marginaila Search

Open source search engine. No ads, no AI. "Indexing the small, old and weird web"(c) Search blogs, forums, plain text sites and more.

marginalia-search.com

Power to the Projects - How do you power your electronics project? So many options, which is best?
https://www.youtube.com/watch?v=qtpqy966ejk

What is the best way to #power small #electronics projects?

Recently, I’ve been working on a lot of low voltage electrical circuits that typically use a microcontroller, sensors, lights and motors; but, what is the best way to power such projects - there are so many options, from batteries to USB!

In this video I give a brief overview of some of my favorite approaches, including some bargain options from AliExpress like USB Power Delivery, Buck converter and Boost converter modules. I’ll talk about the advantages and disadvantages of each approach and wrap up with an overview highlighting what approach I would use in a given application.

What are your favorite #RSS reader applications for each OS?

#microg Release v0.3.7.250923
https://github.com/microg/GmsCore/releases/tag/v0.3.7.250932

New Features and changes:

Work Profile
You can now sign into various work accounts that setup a work profile when using microG. As microG does not comply with all functionality imposed by organization administrators, you need to enable this feature manually in microG Settings > Work profile. Together with this comes functionality to view and install apps suggested by the organization administrator through the Play Store.

Play Feature Delivery
Apps can request installation of additional languages or features from split packages. You can activate this from microG Settings > Play Store
Face detection

This release ships with initial support for Google's Face Detection API. This functionality is still very incomplete, but works for some apps using it.
Changelog

Maps: Various fixes for HMS Maps (#2737, #2754, #2778, #2825). Thanks @DaVinci9196.
Vision: Improve Barcode Scanning APIs (#2735, #2787). Thanks @DaVinci9196.
Vision: Add initial support for face detection API (#2793). Thanks @DaVinci9196.
Location: Add support for moving WiFis in Eurostar trains (#2821). Thanks @TimoWilken.
Fitness: Add dummy for Recording API (#2760). Thanks @DaVinci9196.
Auth: Various fixes for quick login and third-party Google sign-in (#2660, #2698, #2798). Thanks @DaVinci9196.
Auth: Add support for work accounts (#2553). Thanks @fynngodau.
DroidGuard: Disable access to hardware attestation.
Vending: Fix handling of IAP for multi-account setups (#2681). Thanks @DaVinci9196.
Vending: Add work app store (#2553). Thanks @fynngodau.
Vending: Disable access to hardware keys for play integrity (#2740). Thanks @DaVinci9196
Vending: Add dummys (#2759, #2791). Thanks @DaVinci9196.
Various fixes to improve support for Google Apps (#2652, #2654, #2684, #2738, #2767, #2779, #2780). Thanks @DaVinci9196.
Various fixes for dynamic links (#2662), Fido (#2811), SmsRetriever API (#2786), AppSet dummy (#2781), web view handling (#2836, #2862). Thanks @DaVinci9196, @ale5000-git.
Version bumps (#2813, #2829). Thanks @DaVinci9196, @ale5000-git
String and location infrastructure fixes (#2693, #2755, #2781). Thanks @lucasmz-dev, @Fs00.
New/Updated translations

Telegram messenger apps FOSS, with extra features and without the specific Google or Apple appstore version censorship.
Some allow you to choose the push messaging system (firebase, microg, nogcm, unified push)

ANDROID:

🔵 NagramX
@NagramX
Bug Reports & Feature Requests:
@NagramXfeedback_bot
https://github.com/risin42/NagramX

🔵 Nagram
@nagram_channel
Chat @nagram_group
https://github.com/nextalone/nagram

🔵 Octogram
@OctoGramApp
Chat: @OctoGramGroup
APK: @OctoGramAPKs
βeta: @OctoGramBeta
octogramapp.github.io

🔵 NNNagram
@Nnngram
Chat @nagram_group
https://github.com/PreviousAlone/Nnngram

🔵 Cherrygram
@Cherry_gram
Chat: @CherrygramSupport
APKs: @CherrygramAPKs
Beta APKs: @CherrygramBetaAPKs
https://github.com/arsLan4k1390/Cherrygram#readme

🔵 @momogram_update
momogram_update
https://github.com/dic1911/Momogram

🔵 Nullgram
@NullgramClient
CI Update Channel: @NullgramCI
Stable Update Channel: @NullgramAPKs
https://github.com/qwq233/Nullgram

🔵 TelegramX
https://github.com/TGX-Android/Telegram-X
https://xn--r1a.website/tgx_log

🔵 Nekogram
@NekogramAPKs


💻  PC:

🔵 Forkgram (Android or PC)
@forkgram
💻 https://github.com/Forkgram/tdesktop
📱 https://github.com/Forkgram/TelegramAndroid
https://github.com/Forkgram/tdesktop/releases

🔵 Fagram
@FAgramClient
Chat: @FAgram_Group
https://fagram.app
Linux: @FAgramLinux
Windows: @FAgramWindows

🔵 Materialgram
https://github.com/kukuruzka165/materialgram/

🔵 Ayugram
https://github.com/AyuGram/AyuGramDesktop

🔵 Telegram For Gnu Emacs [Unofficial]
https://github.com/zevlg/telega.el

Windows only:
🔵 Unigram
@unigram
@unigramappx
https://github.com/UnigramDev/Unigram


OTHERS

⚠️ DON'T use plusmessenger: https://xn--r1a.website/NoGoolag/3277

Regarding recent censorship controversies on Telegram, it is recommended to use non goolag playstore nor apple store version of telegram.
The official version from its website — like these alternatives — also has less censorship imposed by Google or Apple. You can get it at https://telegram.org

🔵 MadelineProto
Async PHP client API for the telegram MTProto protocol
https://github.com/danog/MadelineProto

🔵 Nicegram (iOS)
https://github.com/nicegram/Nicegram-iOS

🔵 Swiftgram (iOS)
@swiftgram

🔵 Telegram for Watch OS
https://pigeonwatch.app
@pigeonwatch


Not updated:

Telegram-Foss (Android)
https://f-droid.org/app/org.telegram.messenger
Group: @tfossofftopics

Telegraher (Android)
https://xn--r1a.website/Libreware/1057

TDesktop x64 (PC)
@tg_x64
https://github.com/TDesktop-x64/tdesktop

exteraGram
the dev is selling telegram apk's. His donors recieve update app while normal users get very old apk's
@exteraGram @exteraGramCI
https://github.com/exteraSquad
https://exteraGram.app

Mercurygram
@MercurygramReleases
Chat: @Mercurygram
https://github.com/drizzt/Mercurygram

NekoX (Android)
https://xn--r1a.website/Libreware/755

Kotatogram (PC)
@kotatogram


📡@NoGoolag 📡@Libreware
#tg #tgclients #telegram

What are your favorite hardware and open source software for #security #cams, #video #surveillance, #ring #doorbells, #motion detection, #homeassistant...?
What #alternatives do we have?

Latest IronFox for Android update
Updated to Firefox 138.0.
Updated to Phoenix 2025.04.27.1. - (See changes from the last IronFox release)

Added a toggle under Privacy and security in settings to control Safe Browsing. Note that this requires a restart to take effect.

Added toggles under Privacy and security -> Site settings to control JavaScript, JIT, and WebAssembly. (Note that the JIT toggle requires a restart to take effect). Due to the addition of these toggles, we've now enabled WebAssembly by default (due to the notable breakage it causes), though users are recommended to disable it if possible to improve security. JIT will remain disabled by default.

Neutered the mozAddonManager API to restrict its capabilities and limit the data shared with Mozilla, while still allowing users to install extensions from addons.mozilla.org.

We now harden FPP (Fingerprinting Protection) and set our overrides to unbreak websites internally, instead of using the privacy.fingerprintingProtection.granularOverrides & privacy.fingerprintingProtection.overrides preferences like we have previously. This makes it far easier for users to add their own overrides if needed. If you have previously configured either of these preferences, it is highly recommended to reset them after updating to these release. If you would like to disable our overrides to unbreak websites (as well as Mozilla's), you can do so by setting privacy.fingerprintingProtection.remoteOverrides.enabled to false in your about:config.
Added a Quick fixes list to uBlock Origin by default to allow us to work-around/fix issues caused by our default config significantly faster (while we wait on the upstream list maintainers to fix the issues...).

Implemented LibreWolf's Remote Settings Blocker patch to allow us (and users) to limit what collections are read/downloaded from Mozilla, and reduce the data shared. Users can configure this from the browser.ironfox.services.settings.allowedCollections preference in the about:config, though we would not recommend editing this unless necessary, as the collections we allow by default were carefully considered and provide important functionality, including for security.

Improved visibility of domains in the URL bar to better protect against phishing. - (Thanks to @mimi89999! 💜)

Significantly improved upon and expanded Mozilla's built-in certificate pinning to protect against MITM attacks. If you're a website operator and would like your domain to be added or want to request details be changed, please file an issue!
Took back control of all Safe Browsing preferences, meaning these can now be freely controlled by the users from the about:config (with the exception of browser.safebrowsing.malware.enabled & browser.safebrowsing.phishing.enabled - these are controlled by the new toggle in Settings). For example, users can now set their own custom Safe Browsing provider if desired, disable our proxy and revert back to Google's standard domains, etc...

Hardened the internal PDF Viewer (PDF.js) with changes inspired by GrapheneOS's PDF Viewer. - #79

Disabled CSP Reporting to improve privacy, reduce undesired network activity, and limit the data shared with website operators.

Enabled Proxy Bypass Protection to help prevent leaks for proxy users.
Fixed a bug that caused cookies/site data and permissions to always clear on exit, regardless of their check boxes/values set by users.

Disabled Firefox's new Unified Trust Panel redesign for the menu that appears when you select the lock icon on the top left of the URL bar by default, due to phishing concerns (as it unfortunately doesn't currently display the full URL if it's too long). - You can re-enable this if preferred by navigating to IronFox's Settings -> About IronFox -> Tap IronFox's logo at the top 5 times, then go back to Settings -> Secret Settings -> Unified Trust Panel.

Disabled the com.widevine.alpha key system (MediaDrm).

Disabled Mozilla's GeoIP/Region Service to prevent Firefox from monitoring the user's region/general location and reduce unwanted network activity.