• 0 Posts
  • 149 Comments
Joined 2 years ago
cake
Cake day: January 29th, 2025

help-circle
  • Article author doesn’t actually elaborate on what they mean precisely by “cut them loose” but from context it seems to be cut off all their federal funding.

    Not even sure how you’d do that to be honest - even Trump’s admin has struggled to legally withhold federal funds from states he hates, the funding gets pushed through in the end by legal action. So you wanna out-crime Trump? Dumb article.

    If the author wants to make bold demands then along with that comes the requirement of suggesting how to achieve them, else it’s just performative whining.








  • Update from Simon aka imsodin, Syncthing Maintainer

    tl;dr for android users: No need to switch apps at this time, the current install continues to work and is safe. If you can disable app auto-updates, please do that for now to be on the safe side.

    Good news: Had a good chat with @nel0x. He is a collaborator on researchxxl’s repo and just marked those releases as “pre-release”, which prevents the obtainium auto-upgrades. So we are back to no immediate risk for users and we can take it slowly, trying to establish communication and more context. It’s still possible and imo likely that nothing nefarious is going on, just a very suboptimal handover that needs clearing up. There’s no need to go dig for repos on github, the technicalities of continuing to publish an app are not an issue - the open/relevant points are about a possible direct continuation of the existing app (or not), the time/effort that needs to be volunteered to publish an app and the trust in whoever does that. Hopefully we can work something out. If you are interested in helping maintain the app, let us know, other than that imo nothing to do here except if you are a user, to do the above in the tl;dr and every now and then check-in on the status (now and then being more like every week than every hour 😉 ).

    https://forum.syncthing.net/t/does-anyone-know-why-syncthing-fork-is-no-longer-available-on-github/25661/58


  • pulsewidth@lemmy.worldtoSelfhosted@lemmy.world•PSA syncthing-fork has changed owners
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    edit-2
    11 months ago

    Sounds like a really good reason not to use Obtainium, if any repo you have tracked for updates can just redirect you to a completely different repo If they have the keys - and throw no complaints when updating to an entirely different apk.

    With F-Droid they at least have to have the same signing keys, and the code is built by F-droid from source - meaning the code for the supplied APK always matches the code on the repository for the build. Whereas Obtainium will just offer you any APK the dev releases on their GitHub/Gitlab/etc, this places much higher trust on the dev.

    Edit:
    my bad, I wrote earlier that all F-droid builds are reproducable. But that’s not accurate F-droid does not enforce that all builds must be reproducible. They have been helping devs with the tools and assistance to do so since 2015, and all the apps that I use I’d checked in the past and are all using reproducable builds, so I wrongly presumed it was mandatory now. Eg, Syncthing-Fork from Catfriend has had all builds reproducible since v2: https://verification.f-droid.org/packages/com.github.catfriend1.syncthingfork/