• 0 Posts
  • 55 Comments
Joined 8 个月前
cake
Cake day: 2024年10月19日

help-circle





  • Dr_Vindaloo@lemmy.mltoPrivacy@lemmy.mlIs F-droid insecure?
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    19 天前

    The biggest problem with F-Droid is that they sign the apps themselves, so if they ever get compromised, an attacker would be able to send malicious updates to any app installed via F-Droid. So now you need yo trust 2 parties (app developer and F-Droid) instead of 1. This is fixed by reproducible builds, which F-Droid does support but which most developers don’t bother with (F-Droid needs to start pushing for this more aggressively imo).










  • Dr_Vindaloo@lemmy.mltoPrivacy@lemmy.mlSmartphone Hardening. Privacy advice?
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    1
    ·
    edit-2
    2 个月前

    There’s no shortcut you can use to achieve things simply, especially if you want actual anonymity (an extremely high bar). Installing GrapheneOS is the bare minimum (Calyx doesn’t even come close). Then you need to avoid services that ask for personally identifiable info, use VPN for everything (and use public wifi for initial setup), avoid a KYC SIM or SIM in general (also use airplane mode / wifi whenever you can).

    But really I’m guessing you don’t actually need proper anonymity (privacy in general is more reasonable).