[Git][reproducible-builds/reproducible-website][master] Misc cosmetic updates
Chris Lamb (@lamby)
gitlab at salsa.debian.org
Tue Jun 14 11:23:22 UTC 2022
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
045d176b by Chris Lamb at 2022-06-14T12:23:06+01:00
Misc cosmetic updates
- - - - -
5 changed files:
- _posts/2022-06-10-supporter-spotlight-hans-christoph-steiner-f-droid-project.md
- + images/news/supporter-spotlight-hans/antifeatures.png
- images/news/supporter-spotlight-hans/hans.jpg
- + images/news/supporter-spotlight-hans/publish-chart.png
- + images/news/supporter-spotlight-hans/screenshot.png
Changes:
=====================================
_posts/2022-06-10-supporter-spotlight-hans-christoph-steiner-f-droid-project.md
=====================================
@@ -14,7 +14,7 @@ This is now the *fifth* instalment in a series featuring the projects, companies
We started this series by [featuring the Civil Infrastructure Platform]({{ "/news/2020/10/21/supporter-spotlight-cip-project/" | relative_url }}) project and followed this up with a [post about the Ford Foundation]({{ "/news/2021/04/06/supporter-spotlight-ford-foundation/" | relative_url }}) as well as a recent ones about [ARDC]({{ "/news/2022/04/14/supporter-spotlight-ardc/" | relative_url }}), the [Google Open Source Security Team (GOSST)](https://security.googleblog.com/) and [ Jan Nieuwenhuizen on Bootstrappable Builds, GNU Mes and GNU Guix]({{ "/news/2022/05/18/jan-nieuwenhuizen-on-bootrappable-builds-gnu-mes-and-gnu-guix/" | relative_url }}).
-Today, however, we will be talking with **Hans-Christoph Steiner** from **F-Droid**.
+Today, however, we will be talking with **Hans-Christoph Steiner** from the **F-Droid** project.
<br>
@@ -26,8 +26,6 @@ Hans: Sure. I spend most of my time trying to private communications software us
<br>
-[![]({{ "/images/news/supporter-spotlight-hans/fdroid.jpg?#right" | relative_url }})](https://f-droid.org/)
-
**Chris: For those who have not heard of it before, what is the F-Droid project?**
Hans: F-Droid is a community-run app store that provides free software applications for Android phones. First and foremost our goal is to represent our users. In particular, we review all of the apps that we distribute, and these reviews not only check for whether something is definitely free software or not, we additionally look for 'ethical' problems with applications as well — issues that we call 'Anti-Features'. Since the project began in 2010, F-Droid now offers almost 4,000 free-software applications.
@@ -38,6 +36,8 @@ F-Droid is also a 'app store kit' as well, providing all the tools that are need
**Chris: How exactly does F-Droid differ from the Google Play store? Why might someone use F-Droid over Google Play?**
+![]({{ "/images/news/supporter-spotlight-hans/screenshot.png?#right" | relative_url }})
+
Hans: One key difference to the Google Play Store is that F-Droid never permits the installation of proprietary software, or apps that contain malware. This is partly because F-Droid is backed by the free software community; that is, people who have engaged in the free software community long before Android was conceived and, in particular, share many — if not all — of its values. F-Droid will therefore feel very familiar to anyone familiar with a modern Linux distribution.
<br>
@@ -54,9 +54,11 @@ Our signature & trust scheme means that F-Droid can verify that an app is 100% f
**Chris: How do you see F-Droid fitting into the rest of the modern security ecosystem?**
+[![]({{ "/images/news/supporter-spotlight-hans/antifeatures.png?#right" | relative_url }})](https://f-droid.org/en/docs/Anti-Features/)
+
Hans: Whilst F-Droid inherits all of the social benefits of free software, F-Droid takes special care to respect your privacy as well — we don't attempt to track your device in any way. In particular, you don't need an account to use the F-Droid client, and F-Droid doesn't send any device-identifying information to our servers... other than its own version number.
-In fact, we don't even allow users to *install* applications from our repository that track you, unless you first specifically and explicitly enable the 'Tracking' preference in the F-Droid settings. Furthermore, any personal data you decide to give us (such as your email address when registering for a forum account) goes no further than us as well, and we pledge that it will never be used for anything beyond merely maintaining your account.
+In fact, we don't even allow users to *install* applications from our repository that track you, unless you first [specifically and explicitly enable the 'Tracking' preference](https://f-droid.org/en/docs/Anti-Features/) in the F-Droid settings. Furthermore, any personal data you decide to give us (such as your email address when registering for a forum account) goes no further than us as well, and we pledge that it will never be used for anything beyond merely maintaining your account.
<br>
@@ -68,6 +70,8 @@ Hans: In an ideal world, every application submitted to F-Droid would not only b
**Chris: What are the biggest blockers to reaching this state? Are there any key steps or milestones to get there?**
+[![]({{ "/images/news/supporter-spotlight-hans/publish-chart.png?#right" | relative_url }})](https://f-droid.org/en/docs/Reproducible_Builds/)
+
Hans: Time is probably the main constraint to reaching this goal. Not only do we need system administrators on an ongoing basis but we also need to incorporate reproducibly checks into our Continuous Integration (CI) system. We are always looking for new developers to join our effort, as well as learning about how to better bring them up to speed.
Separate to this, we often experience blockers with reproducibility-related bugs in the Android build tooling. Luckily, upstream do ultimately address these issues, but in some cases this has taken three or four years to reach end-users and developers. Unfortunately, upstream is not chiefly concerned with the *security* aspects of reproducibility builds; they care more about how it can minimise and optimise download size and speed.
@@ -82,7 +86,9 @@ However, we *are* in a position to track whether packages in F-Droid are reprodu
<br>
-**Chris: Many thanks for this interview, Hans, and for all of your work on F-Droid and elsewhere. If someone wanted to get in touch or learn more about GNU Guix or Mes, where might someone go?**
+**Chris: Many thanks for this interview, Hans, and for all of your work on F-Droid and elsewhere. If someone wanted to get in touch or learn more about the project, where might someone go?**
+
+[![]({{ "/images/news/supporter-spotlight-hans/fdroid.jpg?#right" | relative_url }})](https://f-droid.org/)
Hans: The best way to find out about F-Droid is, of course, the [main F-Droid homepage](https://f-droid.org/), but we are also on Twitter [@fdroidog](https://twitter.com/fdroidorg). We have many avenues to participate and to learn more! We have an [About](https://f-droid.org/en/about/) page on our website and a [thriving forum](https://forum.f-droid.org/). We also have part of our documentation [specifically dedicated to reproducible builds](https://f-droid.org/en/docs/Reproducible_Builds/).
=====================================
images/news/supporter-spotlight-hans/antifeatures.png
=====================================
Binary files /dev/null and b/images/news/supporter-spotlight-hans/antifeatures.png differ
=====================================
images/news/supporter-spotlight-hans/hans.jpg
=====================================
Binary files a/images/news/supporter-spotlight-hans/hans.jpg and b/images/news/supporter-spotlight-hans/hans.jpg differ
=====================================
images/news/supporter-spotlight-hans/publish-chart.png
=====================================
Binary files /dev/null and b/images/news/supporter-spotlight-hans/publish-chart.png differ
=====================================
images/news/supporter-spotlight-hans/screenshot.png
=====================================
Binary files /dev/null and b/images/news/supporter-spotlight-hans/screenshot.png differ
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/045d176b435b2504ad338a5bad41e96d5ee0b0f0
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/045d176b435b2504ad338a5bad41e96d5ee0b0f0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20220614/960cc00c/attachment.htm>
More information about the rb-commits
mailing list