Skip Navigation

User banner

Pierre-Yves Lapersonne

@ pylapp @programming.dev

Posts
133
Comments
71
Joined
3 yr. ago

Software crafter and digital punker keen on open source, iOS and Android apps. Interested in software ecodesign, privacy and accessibility too. pylapersonne.info

  • Petition Attempts to Force OSI to Release Complete Vote Count

    Jump

  • It seems the “radical” organisations like the FSF or the OES were right and more legitimate in the end.

  • Deleted

    Permanently Deleted

    Jump

  • If you are worried about your privacy, yes, you must get rid of Google Play Services. However a majors part of your apps may be broken as too much rely on this services and only in those services.

    If you want apps to based on this layer of Google mess, have a look on some open spruce alternatives of your favorite apps. Maybe some of them won’t embed Google Play Services. But keep in mind you may lose some features like notifications from Google devices or fine tunes location.

    You can have a look on microG or Open GApps for alternatives. However you may need to hack your device to flash them.

    What you can do, for example:

    • check if you can flash alternatives (possible to root and before unlock the boot loader)
    • maybe check if you can flash another ROM ; projects list the compatible devices. Have a look on LineageOS, GrapheneOS or also /e/OS

  • What Keepass client do you use?

    Jump

  • Yep, it seems it is, but it can manage KDBX files. Just wanted to share 😄

    Edit: sorry, didn’t see this thread is in Android community, my comment is not relevant for this platform.

  • What Keepass client do you use?

    Jump

  • Is Signal safe and still private on an IPhone?

    Jump

  • It is always the same issues in fact. You should consider your threat model before all. Then, consider the Signal app, then your iPhone supposed to be updated, trusted, with ADP enabled, biometric lock with erasure after 10 failures, etc. Then consider your ISP, then your country. Etc, etc. You should also compare the contexts. Is an iPhone “better” than a low or middle ranges Android-powered smartphones? For sure, yes. Is it better than high-range expansive smartphones with Android ? Or Pixel ones? Not that sure. And compared to GrapheneOS or /e/? Pretty sure not that much. You can also compare messaging solutions. Is Signal better than WhatApp? Of course yes. But what about XMPP and Matrix for example?

    And what are your use cases? Remember your threat model. If you are an activist, a journalist or a whistleblower your needs may be different than a “commons citizen worried about its privacy.

    In few words, the only pain point I see is the fact than iOS is proprietary and runs non libre source code and Apple devices than APN. But Android devices are not so much different. It does not mean the solution is not private or efficient, if we succeed in defining a definition of “private or efficient”.

    In a nutshell, it could be considered as good. But not perfect.

  • Apple Removes iCloud E2EE in UK: What You Need to Know

    Jump

  • Any ideas for E2E encrypted storage alternatives?

  • Alternative open source frontend for Instagram?

    Jump

  • Enshitification made third-party apps disappeared. Prefer true open source project instead like Pixelfed for example.

  • How do i ask for contributors to my open source projects?

    Jump

  • Be sure also the issues you have in your project have the suitable labels to help future contributors to pick easily some of them, i.e. labels like “help wanted” or “good first issue”.

    You can also refer to best practices listed and explained for example in Advent of Open Source so as to have a nice and user-friendly repo: https://adventofopensource.com/

  • Looking for a FOSS maps app. (iOS)

    Jump

  • Flutter has been forked to Flock

    Jump

  • Is there a way to hide dependabot commits in the history of a repo?

    Jump

  • BTW I hope any project won’t increase the Z version only by including Dependabot commits, it would be insane. Release must be documented, tested, with CHANGELOG updated. If some maintainers just accept Dependabot commits without checking, move away. That’s just simple crappy auto-merge.

  • Is there a way to hide dependabot commits in the history of a repo?

    Jump

  • Nice idea 👍

  • Best Alternatives to GitHub?

    Jump

  • Whatever the solution behind is, if you have the resources, move to something self-hosted. Open core or not, if that topic matters to you, you might need something you can own and control. BTW, have a look on Forgejo, Codeberg and Gitea: these are the solutions I see when people look for something FLOSS, not open core, and maybe self-hostable.

  • Deleted

    Permanently Deleted

    Jump

  • It depends of the project in fact. You should reach the community and maintainers by joining them in their Discord / Slack / Matrix / whatever. They may be able to help you.

    You can create first an issue, asking for improvements and create a discussion airy the maintainers so as to know which languages are not managed yet and if they are interested in new support. Explains also why you can bring good translations (e.g. native speaker, teacher, etc). It sill help to bring confidence.

    Then create a pull / merge request with the updated files. For example, strings.xml ob Android, .strings in iOS, etc. But beware, localisation is not only a matter of translations. You may have also to support new languages and formats for figures, currencies, or dates for example.

    Do not use translations services. Project maintainers are able to use them, and in plenty of cases the translations are not good at all or loose details.

  • Alternative to Discord ?

    Jump

  • I would have said in fact Matrix or XMPP-based solutions but it seems you already have spotted them. Maybe Mattermost?

  • Removed

    Release v0.1.29 · komorebi - "Tiling Window Management for Windows" (non-FLOSS, see comments)

    Jump

  • The project here is not under an open source license as defined by the 10 criteria of the Open Source Initiative. There is the only acceptable definition of what is open source today, and you can refer to it by clicking on this hyperlink: https://opensource.org/osd

    The publication will be deleted as out of topic.

  • Bluesky

    Jump

  • It seems yet Bluesky has an Android app according to their GitHub repository (https://github.com/bluesky-social/social-app). However indeed nothing mentioned about F-Droid ; maybe some alternative Mastodon clients can also deal with Bluesky?

  • Rustdesk No security audit, not even in roadmap

    Jump

  • Please explain and answer the concerns as voiced by the community ; without more detail man can think your are a troll, a bot, or someone generated this answer using GentAI tools.

    Your answer is not accurate as it does not bring useful details to the community which have legitimate concerns.

    In addition the mentioned GitHub repository in a first sight does not contain mandatory files like CONTRIBUTING or SECURITY which does not help user be confident and have less concerns. Moreover, as the reproducibility of builds is not easy to prove event for FLOSS projects, you cannot rely on that point about open source approach. It does not seem that you are using either Dependabot, Renovate or Snyk to ensure the security of the software.

    You should really bring details and make the community less worried and more confident instead of bringing that type of answers.

    Next ones of that type might be removed ; the community is not dedicated to open source washing.

  • What GitHub alternative do you use?

    Jump

  • GitLab because for CI/CD is it far, far much user friendly and comfortable to use with GitLab CI compared to GitHub Actions and flows.

    In addition I can integrate templates for CI/CD pipelines already defined with the To Be Continuous project (which is open source).

    https://to-be-continuous.gitlab.io/doc/