Not sure what updates you are expecting to happen.
I'm not aware of any effort trying to identify the traffic going in and out on Thunderbird under android. The guesses from the one reporting about what happens when configuring a new email account is of no use since it's easily associated to Thunderbird looking for ways to easy automation on new accounts settings.
Unless there's a throughout analysis of the traffic, I'm not aware of anything to be expected. You can try reaching the one reporting his concern, and ask if he has looked into how to report an actual issue/bug to Thunderbird, or if someone else has done it
Quick question, why not considering lemmy as your "blog" provider? If the "community" concept wouldn't apply, perhaps creating your own "community" and becoming its "mod", disabling posts from others except yours, wouldn't that work? Lemmy already provide RSS feeds so others can follow/track your posts without any lemmy account, just like with any blog providing RSS/atom feeds, and you get "blog" feedback through lemmy, but the same applies to other blog providers, only the ones subscribed can provide feedback.
I was looking for an anonymous blogging mechanism with digital signature (not to identify the author but to verify its authenticity). Long story short, nothing out there seemed to really fit into what I was looking for, but among the suggestions lemmy was there as an option. You can avoid following anything, and looking into lemmy's default from page, just use it to post and get feedback, forgetting about the social networks characteristics of lemmy, and make it work as your blog provider...
Neither servo rendering engine (like gecko), nor verso (an actual rust based web browser based on servo) are quite ready for prime time. But I'm hoping they will be there sooner rather than later. I don't use Firefox directly, but rather wrappers based on it, Librewolf for the desktop and Mull in part because I'm lazy (I prefer the ankerfox stuff and other to be done for me), and if I want to avoid chromium based browsers, dominating big time (MS browser edge is as well chromium base, electron is chromium in disguise, and now a days QT web engine underneath is chromium as well) well there's no option yet.
On the other side, nothing guarantees servo and verso (or whatever other servo based browsers in the future) will care about net free advocacy, neither user freedoms, just be concerned about being better technical solutions, :( But I still have high hopes as you might...
Just being a good technical alternative is not good enough now days, :(
This is sad, not just because it's a trend on Mozilla, but because it shows how mozilla has embraced the corporative kind of mindset. The advocacy team was fundamental for net free principles.
Mozilla based browsers keep being the only practical alternative to web browser dominance, but it itself has degrading its status of resisting bad practices against users and the web in general. And emerging alternatives are also technical alternatives only, with no intention of net freedom advocacy, GPL sort of principles to protect the user and so on.
Sad days indeed, :/
apkupdater not working properly
cross-posted from: https://lemmy.ml/post/22214348
> Some weeks back apkupdater stopped being able to download/upgrade/install from apkpure, but now a days I see issues with apkmirror as well (I see way less apps when searching for them). There was an initial issue about not being able to install from apkpure, but it seems more than that. > > Agreed there's aurora store, but to be honest, I pretty much prefer avoiding the Google Play store at all, and I haven't found an issue with apkpure. > > There was apkgrabber, but it was not working since so long, and finally it got archived on github. > > Is there some FLOSS app similar to apkupdater, other than aurora store? > > Anyone experiencing issues with it? Issues are not meant to be status reports once filed, but it seems not many have even noticed about the referred issue.
apkupdater not working properly
Some weeks back apkupdater stopped being able to download/upgrade/install from apkpure, but now a days I see issues with apkmirror as well (I see way less apps when searching for them). There was an initial issue about not being able to install from apkpure, but it seems more than that.
Agreed there's aurora store, but to be honest, I pretty much prefer avoiding the Google Play store at all, and I haven't found an issue with apkpure.
There was apkgrabber, but it was not working since so long, and finally it got archived on github.
Is there some FLOSS app similar to apkupdater, other than aurora store?
Anyone experiencing issues with it? Issues are not meant to be status reports once filed, but it seems not many have even noticed about the referred issue.
What they're saying there is that when trying to auto detect the server configurations, there are unexpected connections to cloudfare IPs, which didn't usually happen with K9. Who posted the concern associated this to telemetry, but the answers are pointing a different direction. But at this point it just guesses, :(
I guess some more formal traffic inspection needs to happen to understand if truly there's unexpected traffic, where it is directed to, and hopefully infer somehow its purpose. The guesses about what's happening suggest it's just about the auto connection, but again, just guesses.
I explored the configurations, and I didn't find anything about telemetry, and so neither how to disable it. K9 does not have an about:config advanced configuration like desktop Thunderbird does, so if there's truly telemetry or some other sort of information leakage, then after proving it, perhaps developers realize they can do better. But so far nothing really proving telemetry or information leakage.
What telemetry is enabled? Is there a way to disable it?
F-Droid produces its own builds, with its own signatures, so to get f-droid going, you'll need to install from F-Droid. However the import mechanism seems really nice. Perhaps you can install from F-Droid the official release, which can co-exist with your upstream installed beta release, import from it from the F-Droid app, then remove the upstream installed beta release, and if you wan to keep on beta, then install the beta release from F-DRoid (be careful right now, given a bug made K9 show up as beta release as well, but the app ID is clear, just being careful is enough), and then import from the official release, then remove the official release and you're all set. The idea is not to reconfigure a thing by doing those steps, and perhaps you wouldn't like to go to beta, and remain on the official release, which is not that behind, and perhaps better tested.
Did that, thunderbird release no beta, and no issues since I don't have google account. For people with google account requiring to re-sign in, and who don't often do so, signing in is really hard if they don't registered their phone number to google. It's sad, I commented about it in some other post. Understandable in reality they are different apps, but in the end it should be the same user ID, but nevertheless it's a PITA if people don't have a device permanently logged in, :( For them it's better to stay on K9,and hope K9 doesn't go away, or else find out how the heck to login to google once again.
correct, that's the official release, the other is beta for testers...
Sadly, when having a gmail account, the migration is not possible, if the user doesn't keep permanently logged in somewhere. TB is not taking the current K9 OATH, and tries to establish it's own authentication, which on a K9 + desktop TB user not logging often to google at all, it's really almost impossible to login to gmail, since it ask as security the user 1st phone number, which could have never been registered to google, and beyond that it requests to use a different device which is already logged in, but it you go to the desktop, and attempt to login, it does exactly the same thing, the same stupid question or requesting for another device. So it gets into a loop of devices which can't be resolved. And for this other user I tried to setup TB for, they don't authenticate near often to google, but they use both desktop TB and K9 quite well.
For now, for such users, until they figure out how the hell to login to their google account again, they better don't try migrating to Thunderbird, since the import functionality is not quite enough to get google mail working fine, again if the user doesn't login to google often. A bit sad, though it makes sort of sense, since the apps registered to google would be different. Sad in the sense that an already working setup for gmail on K9 can not just be imported as is to TB, and keep just working.
While K9 remains working, there's no issue for such users though. Hopefully that doesn't happen,
It works great when not having a google/gmail account, :)
Ohh, it needs to import though. I was afraid in case there would be sort of two different directories over the same data, or that on TB dir it would be to start fetching stuff. But it seems it literally copies over the directory contents, which is fine, since the then the other app could easily been removed.
And it works with TB non beta, I guess it works with beta for testers a well (though I like the release, and see how it goes). I'll be using non beta for now, a bit behind, I prefer to use releases rather than beta releases, and on f-droid I enabled unstable upgrades...
Anyone played with push vs. pull on TB? On K9, I ended up having both. With the last years changes, it removed the push option selecting from the fetching configs, but the push could be selected/deselected from each folder, and I keep them both. Pulling makes the requirement of not having restrictions on battery usage though.
Not sure if that's getting any better with TB (non beta or beta), and if push has gotten any better. In the end, imap push/idle pretty much depend on the server, and not so much on the client I'd guess...
Thanks !
OK, many thanks !
I'll just do nothing for now then. I hope if at some point a migration is required, it's sort of automatic, f-droid just starts using the Thunderbird app rather than the K9, without user intervention other than performing the f-droid upgrade, one and that would be it. But we'll see.
If you ask, knowing it's the same thing, I would have gone with just one app, replacing the other one, and that would be easier and clearer, :)
Thanks a lot again !
K9 and Thunderbird beta for testers
I'm long K9 user, and I was aware of it becoming Thunderbird, but I need to clarify what should I do to easy eventual transition, hopefully without having the deal with all my K9 settings...
Today K9 turned into Thunderbird Beta for Testers, however there's already an app called that way Thunderbird Beta for Testers showing up on f-droid. Thoug the actual ID of each differ (com.fsck.k9 vs. net.thunderbird.android.beta).
What should K9 users do, to avoid losing its current settings (accounts, folder settings, encryption and so on)? Should we remain using the K9 app, and hope that when it goes away then the thunderbird app replaces it somehow automatically and pick all accounts and settings? Should this period when the two apps with the same name coexist be used to install thunderbird beta for testers, hope that it pick all settings from K9 up, and then remove K9?
It's somehow confusing, I was originally hoping at some point K9 just turned into thunderbird, but at once, automatically, without still having two apps, so I'm wondering what's next. For now I'm just still using the K9 app with thunderbird name...
Thanks !
Edit 1: Many thanks for those who replied, at least I don't have a google account, and no need to inherit the OAuth to google, or any other of such account for that matter, although I could remain to K9 I migrated to Thunderbird official release (no beta) without issues. It sounds like a good opportunity to migrate to Thunderbird.
Edit 2: It's sad that the OAuth can not be inherited, though understandable. For those who were just using TB or K9 for a long time with gmail, and the account gets into the infinite dependency loop of requiring a device already logged in, given the stupid security question has no answer, then perhaps it's time to ditch google and look for an alternative, I haven't found anything useful to help around there. Google actually sent a message indicated it has protected the user from herself, and inhibited her attempt to reach her own account. Meanwhile, just staying with K9 seems OK, since it's still there (just a metadata name corrupted but the app ID remained K9 still).
Cool, many thanks ! I'll just wait a littloe longer then...
Oh, you mean using divestos-fdroid-repo? Well, before it became part of official f-droid I used to do that. I'm not sure how long it'll take to fix the official f-droid.org builds though, since I'd like to go back to it. The sad thing is that to move from one repo to another one loses all configurations/settings, :( But perhaps it's truly unsafe to wait until the build on f-droid.org gets fixed, if it ever does it.
Anyone aware if there are efforts to get it back building for f-droid.org? Does it depend on the Fennec issue getting resolved?
I use mull from f-droid, and f-droid started showing that when upgrading Today to version 1.21.1. No idea why until this f-droid app upgrade.
I guess the mull issue is the same. Both fennec and mull are at the same version on f-droid, 129.0.2, and both show in their anti-features that the app contains a known security vulnerability, indicating firefox has fixed several security vulnerabilities since 130.
Is it right to hope that once fennec can get distributed on f-droid, then mull will follow? I'm not planning to move away from mull.
Thanks !
Dependency cycle on Arch (btw)
cross-posted from: https://lemmy.ml/post/21673875
Cross posting so that the OP realizes this community is alive. I have no issues with qemu, which is installed on my system with no issues.
> Posting here as there doesn't seem to be an active Arch Linux community.
>
> I noticed while updating my system today that I have a bunch of qemu packages I don't recall installing. So I took a look at why they were there and found this:
>
> > Name : qemu-base > Required By : qemu-desktop > Install Reason : Installed as a dependency for another package > > Name : qemu-desktop > Required By : None > Optional For : qemu-base > Install Reason : Installed as a dependency for another package >
>
> It seems like qemu-desktop
was a dependency for something I later removed and pulled in qemu-base
. However, because of the dependency cycle, they aren't showing up as orphans and has just been hanging around in my system along with 150mb of other dependencies.
>
> Correct?
Edit: Adding clarification on why this was cross posted, and no I'm not the OP.
Ohh, do you have miniflux self hosted somewhere so it does the feeds collection, and then on newsflash you hook with the miniflux reader?
What I do to sync (I don't read feeds on the phone) between desktops is to rsync
these 3 dirs:
~/.config/news-flash
~/.local/share/news-flash
~/.local/share/news_flash
That so I don't lose the feed subscriptions neither the history of what I have already looked at, neither what I've kept as starred (there are interesting feeds I want to keep). If miniflux had sort of a client, similar to newsFlash, but that set everything in miniflux rather than locally, so that no matter different desktops (even phones) will have the same starred kept feeds, and the whole history and the like on miniflux... There's a python client, but I don't know if it gets any closer to newsFlash. I guess having miniflux, one can hook to it through any web browser as well, but I really like newsFlash interface, hehe.
The sad thing is needing to somehow keep miniflux running somewhere, which is not feasible for me, and perhaps for others, but it's interesting...
Just so you know you can get push notifications on Jami. Jami has been supporting unified push notification for a while now, but it's opt-in, some might not opt for it considering reducing privacy a bit, as some actually disable the proxy and some phone specific feature intending to prevent battery exhausting too fast.
For unified push support you can take a look at jami's article about its unified push support. I use ntfy
BTW.
Youtube: Free Software Is Under Attack? (Will You Help Defend It?)
YouTube Video
Click to view this content.
cross-posted from: https://lemmy.ml/post/21522958
> (cross-posted from: https://lemmy.ml/post/21522265) > > A group of people including Drew DeVault are trying to cancel RMS again, basing their claims on ancient misinterpreted quotes. Stallman may be controversial, but these activists are just acid for the entire Free Software movement.
This banning culture of hate is ridiculous, you can disagree with someone, or even just ideas, but procuring "canceling" and "banning" to everything we don't agree is crazy. This mono culture of hate really saddens me. But perhaps you're right on your appreciation.
Some of these periodical rebirths of the debate about RMS, what are really looking for is discredit on the Free software, which is not the same as open source software. Drew is one of those, if I'm not mistaken because his blog is prolific, who believe free software has no hope, and the total triumph of open source, which in practice is correct, but ethically I'm not so sure. We should be aware of what's behind all these attacks, and I believe it's naive to think these attacks are just about RMS. Free software is ethical in the sense of the freedoms it seeks for the users, but that has no place on enterprises and corporations, open source has enjoyed a different fate because it's not as strict on respecting those freedoms, which under enterprises and corporations are believed to be too restrictive and against their interests. And here we are over and over attacking the organizations (yes, the FSF is attacked not only because RMS is part of it, it was founded by him as well) and people defending those principles, because in the end our minds tend to disqualify everything way too easily, made easy with this banning culture of hate. I've read about how useless it is the FSF, and also about how useless it is the copyleft, and these recurrent intend to discredit the one who started all that of course discredits what came from him, one way or another. I wish I'm wrong on this, and that there was no pun intended towards free software...
The original post was most probably included into the wrong community for sure BTW, this is an open source community, so looking to empathize about free software stuff in here is not going to happen, even less for RMS.
Bleepingcomputer: Mozilla fixes Firefox zero-day actively exploited in attacks
Darn, and I just got Librewolf upgraded to 131.0, meaning needing to wait further for 131.0.2.
Updated Aug. 28, 2024. Take back your privacy Firefox is rolling out Total Cookie Protection by default to more Firefox users worldwide, making Firefox the
Is this total cookie protection something embedded, not requiring any user intervention? I know with librewolf we get the strict enhanced cookie protection mode, but I don't know if for this total protection there's something required, if not turned on by default...
Greetings !
ZDNET: 20 years later, real-time Linux makes it to the kernel - really
The work done on real-time Linux has benefitted the open-source OS for years, but it was only this week that Linus Torvalds admitted its last piece into the mainline kernel. Exactly what took so long?
anonymous blog preserving author identifier digital signature or similar
Hello !
I'm wondering if there's some blogging mechanism which would allow some sort of unique digital signature (PGP perhaps) to prevent personification, but which allows non traceable and fully anonymous author. Not looking for blockchain like stuff (apart from the layer Monero adds, blockchains are totally transparent, traceable and non anonymous). Not looking for bigotry, attacking people or anything like that.
The idea is to be able to share ideas, even corporate related, without being afraid of retaliations whether at work, corporations or governments. Expressing something at pubic might bring unexpected consequences, particularly if not aligned by the corporation one works on if that's the case, or might provoke AI, bots, or paid/unpaid people looking around, to include anyone in a particular list, without even warning the writer about it.
So I was looking if such thing is possible, and if it exists. Social networks of course wouldn't be an option, they're not anonymous, and at contrary can be used to cross-reference and trace people.
If such solution doesn't exist, I'm wondering if something based on gnuNet might get close, although gnuNet is not meant to make users anonymous. Or perhaps something based on i2p.
Of course the digital signature should be used exclusively for the blog posting, and can't be associated to any real email, host, or whatever...
Feedback on the blog posts should also be allowed to anonymous people with their own unique digital signatures. But this is harder, since depending on the technology, not sure if moderation would be allowed, or even if it would make sense, in which case, no blog feedback should be allowed, though no feedback is really a down side for blog posts. Maybe allowing just the original post to remove feedback. Some other down side, but that's unavoidable, is the lack of non on thread feedback, meaning giving feedback through email or any other medium, since if that was available would make the writer non anonymous...
If such thing is not available, and eventually based on something like gnuNet or i2p, most probably clients would be needed to write blogs but another one that would offer some sort of RSS/atom functionality for the blog to be accessible from current RSS/atom readers.
Dhole Moments: Against XMPP+OMEMO - Dhole Moments
XMPP is a messaging protocol (among other things) that needs no introduction to any technical audience. Its various implementations have proliferated through technical communities for decades. Many…
This blog post, and some of its comments are pretty interesting and concerning at the same time. Not really sure if in the end that means that nothing other than centralized controlled messaging can be as cryptography safe.
Any comments?
not syncing xmpp community from slrpnk.net?
XMPP [https://xmpp.org/about/] (aka Jabber) is the community-owned standard for real-time federated messaging. For a quick start click here [https://joinjabber.org/docs/] JoinJabber.org support chat [https://joinjabber.org/support] JoinJabber.org admin support chat [https://chat.joinjabber.org/#/gue...
Hello, [email protected] was locked by my mods, and continued on [email protected] which is entirely fine given federation, so I guessed I could follow it on the lemmy sort of synced space/community, [email protected], where I can post to the slrpnk community without having an account there. But for some reason recent posts on slrpnk real xmpp community are not showing on [email protected], like if they're not syncing anymore.
Any way to remediate it?
Is there an issue with federation between lemmy.ml and slrpnk.net?
Hi !
As I have account on lemmy.ml, I look into the lemmy community created on slrpnk.net through the federated lemmy community, but its contents don't match the ones on the original slrpnk community. There are some messages missing.
Not sure if this is something someone would care, but I was planning to look at the contents through the lemmy instance, where I do have my account...
Greetings !
Firefox to collect your (anonymized) search data
Innovation and privacy go hand in hand here at Mozilla. To continue developing features and products that resonate with our users, we’re adopting a new a
I believe the settings to disable this on Librewolf are set by default...
Anyone able to disable DeviceLockController app on LOS?
Hey !
On LOS 21, the app DeviceLockController is there, but it can't be stopped neither disable, at least from my side.
There's another one I don't trust, Android System Intelligence, but I could stop it and disable it.
Those two apps really are scary to be part of LOS. Is anyone aware of bugs on LOS about getting rid of them?
How about DeviceLockController? A reasonable way to disable it without risking too much bricking the phone in the process?
Thanks !
xz-5.6.1-2
from Artix system repo is already available.
Artix corresponding news: The xz package has been backdoored
Offline devices not syncing when coming back online, is it due to server policy?
I'm not self hosting, so I'm depending on what the server admin enables, and the policies they establish.
That said, the server fully supports xep-0313, which perhaps among other things control messages being kept on the server precisely for the purpose of sending them to all registered devices, thus allowing the sync.
But perhaps there's a policy in place removing the messages from the server as soon as some device has gotten it, leaving only online devices with the ability to grab them. I don't know if that's possible...
I experimented getting a device offline for a couple of minutes, and then exchanged messages with another account, and also to my same account. Then eventually I got the device offline, and none of the messages, not even the ones sent to myself, were ever synced on the device just coming online...
This is really sad, since that's precisely one of the benefits of having servers over peer to peer solutions, it's easier to sync devices through the server.
Might this be some sort of policy to keep disk usage on the server low?
I might need to explore some other server if that's the case...
Thanks !
Edit: Communicated with the admin, and they mentioned this was unexpected.
Is it possible to go back to lemmy.ml?
Just wondering, as the reasons to move here are gone, can the community go back to lemmy.ml? There are quite some posts over lemmy.ml, so going back there would be useful I believe, and also moving the few posts here over there would be just great (perhaps not the comments)...
Just an honest question, not to provoke flame wars or anything like it...
Greetings !