• 3 Posts
  • 21 Comments
Joined 2 years ago
cake
Cake day: July 24th, 2023

help-circle


  • ashaman2007@lemm.eetoPrivacy@lemmy.mlIs F-droid insecure?
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    18 hours ago

    Let’s be careful to remember that there are different levels of effort and understanding required for different levels of security and privacy. GrapheneOS has taken the approach of offering harm reduction, with sane defaults and options that allow advanced users to take near-complete control over their device (within the limits of the Pixel hardware). This is obvious by their inclusion of the sandboxed Google Play Store as a major feature of the OS, as it is much better than the situation on Google’s Android. It is also not installed by default, forcing users to at least somewhat educate themselves in order to install it.

    Accrescent is right in line with this philosophy, and is also not installed by default. Of course if your threat model (or desire) is to achieve the highest level of online anonymity and to have a completely FOSS system, you should not use it… of course you probably shouldn’t use FDroid either, in that case, and should build from source. However, you are clearly in a situation where your threat model does not require those lengths, and FDroid is more of a principled choice.

    I think its pointlessly inflammatory to call Accrescent “dangerous” just because it allows for non-FOSS software. Now if you want to criticize whether or not it is fulfilling its stated goals, that is another story.

















  • Yeah… I’m laughing at this guy saying the AUR is much better than installing from a random Github repo. Same level of trust haha.

    Also, not everybody NEEDS to know how something works to use it. And, just getting someone onto Linux in the first place with a 90% working system seems better to me than them working hours and hours to build a minimal system in Arch … because it would take even more hours to replicate their workflow on Windows or Mac. I think this is a great example of “perfect is the enemy of good” when trying to get people to adopt something.

    However, I definitely believe that if you want perfection, you go to Arch or a derivative and you do it yourself, no automation. But that should be a choice… I do plan on one day switching from Tumbleweed to Arch, but I am not ready for the time commitment. Plus, NVIDIA finally fixed their shit, so I want to enjoy playing games for a while now that the weird issues and visual artifacts caused by the old non-explicit-sync drivers are gone!