[Git][reproducible-builds/reproducible-website][master] Misc updates.

Wed Jun 22 11:35:14 UTC 2022


Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
a40db64f by Chris Lamb at 2022-06-22T12:34:55+01:00
Misc updates.

- - - - -


1 changed file:

- _posts/2022-06-10-supporter-spotlight-hans-christoph-steiner-f-droid-project.md


Changes:

=====================================
_posts/2022-06-10-supporter-spotlight-hans-christoph-steiner-f-droid-project.md
=====================================
@@ -38,7 +38,7 @@ F-Droid is also a 'app store kit' as well, providing all the tools that are need
 
 ![]({{ "/images/news/supporter-spotlight-hans/screenshot.png?#right" | relative_url }})
 
-Hans: One key difference to the Google Play Store is that F-Droid never permits the installation of proprietary software, or apps that contain malware. This is partly because F-Droid is backed by the free software community; that is, people who have engaged in the free software community long before Android was conceived and, in particular, share many — if not all — of its values. F-Droid will therefore feel very familiar to anyone familiar with a modern Linux distribution.
+Hans: One key difference to the Google Play Store is that F-Droid does not ship proprietary software by default. All apps shipped from `f-droid.org` are built from source on our own builders. This is partly because F-Droid is backed by the free software community; that is, people who have engaged in the free software community long before Android was conceived, and, in particular, share many — if not all — of its values. Using F-Droid will therefore feel very familiar to anyone familiar with a modern Linux distribution.
 
 <br>
 
@@ -58,13 +58,13 @@ Our signature & trust scheme means that F-Droid can verify that an app is 100% f
 
 Hans: Whilst F-Droid inherits all of the social benefits of free software, F-Droid takes special care to respect your privacy as well — we don't attempt to track your device in any way. In particular, you don't need an account to use the F-Droid client, and F-Droid doesn't send any device-identifying information to our servers... other than its own version number.
 
-In fact, we don't even allow users to *install* applications from our repository that  track you, unless you first [specifically and explicitly enable the 'Tracking' preference](https://f-droid.org/en/docs/Anti-Features/) in the F-Droid settings. Furthermore, any personal data you decide to give us (such as your email address when registering for a forum account) goes no further than us as well, and we pledge that it will never be used for anything beyond merely maintaining your account.
+What is more, we mark all apps in our repository that track you, and users can choose to hide any apps that has been tagged with a specific [Anti-Feature](https://f-droid.org/en/docs/Anti-Features/) in the F-Droid settings. Furthermore, any personal data you decide to give us (such as your email address when registering for a forum account) goes no further than us as well, and we pledge that it will never be used for anything beyond merely maintaining your account.
 
 <br>
 
 **Chris: What would 'fully reproducible' mean to F-Droid? What it would look like if reproducibility was a 'solved problem'? Or, rather, what would be your 'ultimate' reproducibility goals?**
 
-Hans: In an ideal world, every application submitted to F-Droid would not only build reproducibly but would come with a cryptographically signature from the developer as well. Then we would only distribute an compiled application after a build had received a number of matching signatures from multiple, independent third parties. This would mean that our users were not placing their trust solely in software developers' machines, and wouldn't be trusting our centralised build servers as well.
+Hans: In an ideal world, every application submitted to F-Droid would not only build reproducibly, but would come with a cryptographically-signed signature from the developer as well. Then we would only distribute an compiled application after a build had received a number of matching signatures from multiple, independent third parties. This would mean that our users were not placing their trust solely in software developers' machines, and wouldn't be trusting our centralised build servers as well.
 
 <br>
 
@@ -84,13 +84,16 @@ Hans: To underline a topic touched on above, F-Droid is dedicated to preserving
 
 However, we *are* in a position to track whether packages in F-Droid are reproducible or not. As in: what proportion of APKs in F-Droid have been independently verified over time? Unfortunately, due to time constraints, we do not yet automatically publish charts for this.
 
+
+We do publish some raw data that is related, though, and we naturally welcome contributions of visualizations based on any and all of our data. The "[All our APIs](https://f-droid.org/docs/All_our_APIs/)" page on our wiki is a good place to start.
+
 <br>
 
 **Chris: Many thanks for this interview, Hans, and for all of your work on F-Droid and elsewhere. If someone wanted to get in touch or learn more about the project, where might someone go?**
 
 [![]({{ "/images/news/supporter-spotlight-hans/fdroid.jpg?#right" | relative_url }})](https://f-droid.org/)
 
-Hans: The best way to find out about F-Droid is, of course, the [main F-Droid homepage](https://f-droid.org/), but we are also on Twitter [@fdroidog](https://twitter.com/fdroidorg). We have many avenues to participate and to learn more! We have an [About](https://f-droid.org/en/about/) page on our website and a [thriving forum](https://forum.f-droid.org/). We also have part of our documentation [specifically dedicated to reproducible builds](https://f-droid.org/en/docs/Reproducible_Builds/).
+Hans: The best way to find out about F-Droid is, of course, the [main F-Droid homepage](https://f-droid.org/), but we are also on Twitter [@fdroidorg](https://twitter.com/fdroidorg). We have many avenues to participate and to learn more! We have an [About](https://f-droid.org/en/about/) page on our website and a [thriving forum](https://forum.f-droid.org/). We also have part of our documentation [specifically dedicated to reproducible builds](https://f-droid.org/en/docs/Reproducible_Builds/).
 
 <br>
 



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/a40db64f31b4b4e4a3f5a2402dd39ff8c7b8bdc0

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/a40db64f31b4b4e4a3f5a2402dd39ff8c7b8bdc0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20220622/7dfebc47/attachment.htm>
