Anøm claimed to offer total security — but claims are worthless without independent verification.
We make some big claims too: we're onion-routed and decentralised with anonymous sign-up.
The difference is, our security audit by @firstname.lastname@example.org proves it.
2. Non-Free dependencies (GMS, Firebase)
@0 @session @jcast using the web browser with my repo you can always figure such things for apps available there: scroll down to the APK details, toggle the library section open, and check fo all those ⓉⓃⒹs 😉 Especially the latter – as other than with F-Droid itself, with my repo they usually mean the app itself contains a non-free library.
F-Droid wants all our dependencies to be hosted in a few specific places. We inherit a bunch of the dependencies from Signal, so moving them would be a huge amount of work. We'd also have to remove anything that uses Google services, like FCM (which means no push notifications anymore for anyone using F-Droid).
Was not aware at all, never got one, even when using Tor. Thanks for calling out.
From the discussion in github, they seem to support *any* captcha, not specifically reCaptcha, but disappointing anyway.
Privacy law don't apply to intelegence agencies, in many places they're above the law, and nearly always above accountability.
Big data companies can afford to say they comply and then covertly send data to their home country. There was a report on MicroSoft in EU regarding how untraceable is the sensitive data they process... MS is linked to PRISM are so this is not just simple people worrying, nations are affected and lose power, control and governance.
@session This also hilights another issue in many "security" hype stories. Most are about #GAFAM companies "securing" your connection TO their software. They willfully ignore though, that the latest upgrades don't protect you FROM their software.
Google enforcing https is a great example of this. Yeah, it makes your data safer from low grade crims intercepting it. It does NOTHING to stop Google from exploiting you and your personal info though. It's about Google keeping it all to themselves.
Server run by the main developers of the project It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!