Izzy

he/him

#Android Enthusiast, #Privacy Proponent, #FOSS Promoter, #Linux User

My posts are licensed under Creative Commons Attribution-NonCommercial-ShareAlike (CC BY-NC-SA, https://creativecommons.org/licenses/by-nc-sa/4.0/)

Bitcoin: 1PLEoRm3gQyH5U1nXdcd146kG5bQTrNLu3

Donations: https://android.izzysoft.de/help?retribute&topic=support_us

For the IzzyOnDroid project: https://liberapay.com/IzzyOnDroid/ & https://opencollective.com/izzyondroid

IzzyOnDroid Uptime Monitor: https://monitor.izzysoft.de/

IzzyOnDroid Download Stats: https://stats.izzyondroid.org/

Website: https://android.izzysoft.de/
Codeberg (Izzy): https://codeberg.org/izzy
Codeberg (IzzyOnDroid): https://codeberg.org/IzzyOnDroid
OpenCollective: https://opencollective.com/izzyondroid

Public Key

npub12zqkll005e5jjmm607u6du20cqrqhjsll5p0h8apyd5apzm7t7csu3fc5r

NIP-05 Address

izzyondroid_at_floss.social@momostr.pink

Profile Code

nprofile1qqs9pqt0lhh6v6ffdaa8lwdx798uqpsteg0l6qhmn7sjx6ws3dl9lvgprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmnt7g6jst

Publishing to

relay.momostr.pink

Author Public Key

npub12zqkll005e5jjmm607u6du20cqrqhjsll5p0h8apyd5apzm7t7csu3fc5r

Show more details

Published at

2026-06-01T00:28:24Z

Kind type

0 Metadata

Event JSON

{ "id": "be721acee6635768d76587df34ca83c7947c86c818f69c532dcafdb8245af986", "pubkey": "50816ffdefa669296f7a7fb9a6f14fc0060bca1ffd02fb9fa12369d08b7e5fb1", "created_at": 1780273704, "kind": 0, "tags": [ [ "t", "FOSS" ], [ "t", "privacy" ], [ "t", "Linux" ], [ "t", "Android" ], [ "proxy", "https://floss.social/users/IzzyOnDroid", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://floss.social/users/IzzyOnDroid", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Izzy\",\"about\":\"he/him\\n\\n#Android Enthusiast, #Privacy Proponent, #FOSS Promoter, #Linux User\\n\\nMy posts are licensed under Creative Commons Attribution-NonCommercial-ShareAlike (CC BY-NC-SA, https://creativecommons.org/licenses/by-nc-sa/4.0/)\\n\\nBitcoin: 1PLEoRm3gQyH5U1nXdcd146kG5bQTrNLu3\\n\\nDonations: https://android.izzysoft.de/help?retribute\u0026topic=support_us\\n\\nFor the IzzyOnDroid project: https://liberapay.com/IzzyOnDroid/ \u0026 https://opencollective.com/izzyondroid\\n\\nIzzyOnDroid Uptime Monitor: https://monitor.izzysoft.de/\\n\\nIzzyOnDroid Download Stats: https://stats.izzyondroid.org/\\n\\nWebsite: https://android.izzysoft.de/\\nCodeberg (Izzy): https://codeberg.org/izzy\\nCodeberg (IzzyOnDroid): https://codeberg.org/IzzyOnDroid\\nOpenCollective: https://opencollective.com/izzyondroid\\n\",\"website\":\"https://floss.social/@IzzyOnDroid\",\"picture\":\"https://cdn.masto.host/floss/accounts/avatars/109/174/072/017/303/602/original/06cd2ac17ad7efe0.jpg\",\"banner\":\"https://cdn.masto.host/floss/accounts/headers/109/174/072/017/303/602/original/62d958a1bce44c77.jpg\",\"nip05\":\"izzyondroid_at_floss.social@momostr.pink\"}", "sig": "ea33f05b319b8b66e6b24f52f06e00e4011fe1a810305105ebdc35b385f04c73423d63c272ec49bf87d1a67d0e3465db85f779b454fd64e93f8f7689cb77201b" }

Last Notes

2026-05-07 17:53:21 UTC

Seems like the question of #GitHub becoming fully unusable is not "if", but rather "when". We feel the issues now for the 5th month, and it's getting worse by the day. Today, out of 13 builds, 12 failed – either because of stalling when cloning the repo from GitHub or one of the submodules, or some other GitHub error message. Some builds we had to run 8 times to finally pass (and some of those only to find out their recipe needs adjustments, as e.g. the upstream APK was not built from the tag)…

2026-04-30 10:08:02 UTC

Did I say GitHub became mostly unusable?
> The main driver is a rapid change in how software is being built. Since the second half of December 2025, agentic development workflows have accelerated sharply. By nearly every measure, the direction is already clear: repository creation, pull request activity, API usage, automation, and large-repository workloads are all growing quickly.
https://github.blog/news-insights/company-news/an-update-on-github-availability/
"agentic development workflows", huh? "exponential growth"…
https://cdn.masto.host/floss/media_attachments/files/116/493/104/131/162/915/original/b20ad05507fed621.png

2026-04-16 18:20:26 UTC

Remember? "Sideloading" is here to stay, and won't go away, they said? Don't be afraid, they said? Something something "we heard you"? Suuuure! Who would ever doubt it!
Attached the copy of a mail developers with apps in the PlayStore CURRENTLY receive. Please, read the text in the red box carefully:
"Apps not registered by September 2026 WILL NO LONGER BE INSTALLABLE ON CERTIFIED ANDROID DEVICES in select countries."
See an exception there? I don't.
#Google #Android #DeveloperCertfication
https://cdn.masto.host/floss/media_attachments/files/116/415/735/843/994/197/original/07ab10275b1c8477.png

2026-04-06 22:00:46 UTC

Copilot Is 'For Entertainment Purposes Only,' According To Microsoft's ToS
https://slashdot.org/story/26/04/06/046228/copilot-is-for-entertainment-purposes-only-according-to-microsofts-tos
So please, if you use Windows 11 on a computer: remember that it's only an entertainment system, and should not be used for serious stuff!

2026-03-31 17:31:43 UTC

I blocked Google's tracking domains at my router and saw exactly what my Android was hiding
https://www.makeuseof.com/blocked-googles-tracking-domains-saw-exactly-what-android-hiding/
Most Android privacy toggles are rather placebos? I'm shocked!
#Google #Tracking

2026-03-25 12:12:38 UTC

- reply

"Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. […] Google is, quite literally, hosting phishing attacks on its own infrastructure and not catching them with its own detection tools"
https://www.norn-labs.com/blog/huginn-report-feb-2026
#Google #SafeBrowsing

2026-03-25 11:34:06 UTC

- reply

Day 4 again, without any response. Quite a reliable service that: you can rely on it to let you wait. What does that run on, that it takes that long? An Arduino Pico? Needless to say that the alleged malware file does not even exist, and never was malicious.
Filed another review request.
Again: disable that stuff. Seems to have more false positives than real stuff. Especially as entire domains hosting the real stuff (like storage.googleapis.com) are excluded from scan.
#SafeBrowsing #Google

2026-03-20 16:08:18 UTC

- reply

Day 4. A response, finally. The usual clown message: Review failed. Well, the "clown message" is the one in the attached graphic: They don't know themselves. Something something link, but they don't know which. Or, in other words: "These URLs host malware or unwanted software downloads: None". 🤦‍♂️
If that's how reliable their services are, maybe they should NOT hold the keys to the entire Internet (and app stores)? 🤔
#Google #SafeBrowsing
https://cdn.masto.host/floss/media_attachments/files/116/262/347/699/160/531/original/29bd9cb3051fd917.png

2026-03-20 10:41:22 UTC

- reply

And there I thought developer mode was discouraged for "standard users":
"Developer modes expose features of the mobile operating system (MOS) that are not available during standard operation. An adversary may leverage a vulnerability inherent in a developer mode to compromise the confidentiality, integrity, and availability of DOD sensitive information. Disabling developer modes mitigates this risk."
(Tenable Audit: https://www.tenable.com/audits/items/DISA_STIG_Google_Android_15_COBO_v1r2-AirWatch.audit:3722d2c6e738b1955d48f57783163430)
So, this is about security? LMAO…

2026-03-19 13:32:25 UTC

- reply

Day 3 now. Still no response to my review request. I've filed another now as reminder. Still wonder what takes their bots that long. But well, after all, it took them 9 years to find the initial file. Hope it doesn't take the same time now to clear it again 🙈

2026-03-18 11:38:44 UTC

- reply

I had filed a reevaluation request before I tooted this. 2 days later, no reply yet (why does their bot take THAT long?). Instead I hear, another "fine tool" kicked in: Play "Protect" refuses installation of the allegedly malicious app, and even uninstalls them AUTOMATICALLY, without asking you! https://github.com/sunilpaulmathew/AppVaultX/issues/6#issuecomment-4079105010
Another rather questionable tool you might consider to get rid of (unless you install a lot from "questionable sources").
#Google #SafeBrowsing #PlayProtect
https://cdn.masto.host/floss/media_attachments/files/116/250/011/855/639/289/original/80c0a5cccad2c012.png

2026-03-16 16:09:59 UTC

- reply

Of course the review failed (as usual, without a notification mail). Now they pick random APK files: remove one, then it's the next. Until the repo is empty, I guess. Snippet updated.
Disable "Safe" browsing, it's snake oil as you can see. We've been libeled now many times, always false positives. See https://gitlab.com/-/snippets/4909577#notes-on-how-to-disable-google-safebrowsing-in-browsers-on-android for how to disable it.
Of course all our APKs have been scanned, multiple times, with many engines. They're clean. Says even G's own scanner.
#Google #SafeBrowsing

2026-03-15 20:22:57 UTC

- reply

Oh, did I mention that that file does not even exist – for 2 month now? 🤦‍♂️ So even if it would have been malicious: a timely warning for those who trust that snake oil, would you agree? How often do they update, I wonder…

2026-03-15 20:09:00 UTC

Oh my, those clowns again. They cannot even tell servers apart, but want to play the "Safety Police"? What are they doing for a living, by the way (apart from slurping and selling our data)?
Yes, that's the same file as in January. On a different server. But they flag yet another, that does not even have that file. Incompetent folks, they should shut down that "service". Will they ever stop that nonsense?!?
#Google #SafeBrowsing #failure
https://cdn.masto.host/floss/media_attachments/files/116/234/980/709/616/725/original/53c435c1003637b1.png

2026-02-18 22:37:05 UTC

- reply

> We know users will rarely visit the site so the Client(s) will get a banner soon too.
The new release of Neo Store (published today) already has it. And our website has it as well: https://izzyondroid.org/

2026-02-17 14:24:18 UTC

- reply

And while the banner correctly states F-Droid being under threat: it's not just F-Droid, it's the free Android world being under threat. In its entirety. So the same applies to IzzyOnDroid – but also to Obtainium & Co. And if you think you could still use Aurora to access the PlayStore, think again: how would you install Aurora in the first place?
This is the empire striking. The alleged "security" is just a way to circumvent the requirement to open for alternative stores.

2026-02-09 17:07:38 UTC

Gith-ick-ub currently it seems. Tried from multiple machines in different locations, `git ls-remote` just stalls. Fun with RBs then today…

2026-02-06 18:25:57 UTC

- reply

it would also help if you'd publish releases with their corresponding APKs attached. Only that way, Reproducible Builds can be supported (which we and @npub1mtr…trt0 have, see e.g. https://izzyondroid.org/about/security/ReproducibleBuilds/ for a short intro).
I don't know about the size of your APK, so I cannot tell if we could take it in at IzzyOnDroid – but if it's below 30 MB, be welcome to apply (once the APKs are available, as we always ship the APKs built & signed by their devs) @npub1ec0…qkpw

2026-01-28 11:52:05 UTC

- reply

For those attending #FOSDEM and interested in the topic: make sure to attend Marc's talk "Fear and Loathing in the App Stores: when FLOSS principles collide with the Gatekeeper interests" (https://fosdem.org/2026/schedule/event/TYZH97-fear-loathing-app-stores/), which covers this topic. We will be there, and also be ready to answer questions.
Of course we can also be found at our stand in UD2-02 😉
Big thanks to @npub1s3u…fcs2 from the @npub1mtr…trt0 board for picking this up!
#IzzyOnDroid #fdroid #FOSDEM2026 #resist #GateKeepers

2026-01-28 11:06:02 UTC

- reply

It's taken them more than 36h to reevaluate their "finding". The files are non-existing for at least 38h. Still: review failed. They now mark us red for a file that does not even exist! How should one trust such a service to be safe – and not just a random annoyance?
Honestly, if it's THAT reliable, rather turn it off. It seems to be rather useless (for you and me), and utilized for censorship (or how else should one understand this?)
#Google #Safebrowsing
https://cdn.masto.host/floss/media_attachments/files/115/972/360/200/101/224/original/4d95f01d60026d65.png
https://cdn.masto.host/floss/media_attachments/files/115/972/365/641/693/417/original/99397903e7fccdf6.png
https://cdn.masto.host/floss/media_attachments/files/115/972/383/459/599/376/original/b0f3382a8d008a29.png

2026-01-25 12:07:55 UTC

Google is now marking EVERY SINGLE APK at our repository as "Malware site issue". Congrats, "Safe" browsing.
Of course there is not a single malware there, everything is scanned multiple times. And I bet they excluded *.google.com from their scan or the entire PlayStore would be red by now, too…
Calling out to all of you: Please use https://safebrowsing.google.com/safebrowsing/report_error/ to report the links as "safe"!
https://apt.izzysoft.de/fdroid/repo/com.apkupdater_52.apk is the one console reports.
:boost_love:
#serviceToot #izzyOnDroid #fediPower

2026-01-20 22:17:11 UTC

- reply

So did I, which is why I didn't check. But then, who'd have thought installing a graphics driver would require more than half of the system partition (here: I tried to install ROCm/AMDGPU on a test machine, which required "25 GB (!!) additional disk space)…
Checking disk space must be complicated. Package dependencies are easier… 🙊 💨

2026-01-20 21:31:46 UTC

OK, TIL (Today I Learned):
If "apt install" tells you "after this installation, XX GB additional disk space will be used" – that means that YOU SHOULD LOOK if that's available. Because, APT DOES NOT – it simply … well, stops working when the disk is full 🤦‍♂️
Have fun then cleaning up. Glad I ran a Timeshift backup immediately before…
(EDIT: it was `apt` in my case, not `apt-get`. But such a thing simply should not happen at all.)
#Debian #apt

2026-01-15 14:36:54 UTC

- reply

Issue filters! 🥳 How cool is that! Was missing it for sooo looong… Thank you so much!!!

2025-12-30 01:35:27 UTC

We are receiving reports that Google flags our repo as "having dangerous apps" or being a "dangerous site" – texts being very vague, no proof given (nor did they inform us). They also link to a page they call "Transparency Report" – which is of the same vagueness, but definitely not transparent (https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fapt.izzysoft.de%2Ffdroid%2F&hl=en)
We're not aware of any such dangerous content. All apps on our repo are properly scanned, see https://izzyondroid.org/about/security/
#IzzyOnDroid #serviceToot
https://cdn.masto.host/floss/media_attachments/files/115/805/889/881/110/888/original/aac9b18a17dda813.png
https://cdn.masto.host/floss/media_attachments/files/115/805/891/357/952/270/original/bef38ae25a8f71bc.png

2025-11-27 20:12:44 UTC

Who had the funny idea to turn tags to lowerCase on auto-completion in the Mastodon Web UI? That's kinda nasty. Especially if I select a tag like "AndroidAppRain" (spelled exactly like that in the suggestion) by typing "AndroidA" and let it auto-complete: "androidappRain" is *NOT* what I'd expect.
I've checked the preferences, but found nothing. Any hints on how to set this to sane defaults? Screenreaders have it easier with CamelCase…
@npub1ufx…u2t8 @npub1qus…uxmz some setting on instance level maybe?

2025-10-29 11:34:01 UTC

Is Google Killing Android Sideloading? F-Droid Says Yes, Google Says No
https://phandroid.com/2025/10/29/is-google-killing-android-sideloading-f-droid-says-yes-google-says-no/
We also say "yes". It will harm the FOSS world. There are people who cannot "dox" themselves for "Google verification", or risk their personal safety.
Plus after all: can or should we really trust our personal data to a company whose business consists of selling them?

2025-07-16 14:11:42 UTC

💡 A Habit Tracker that comes with a bunch of (proprietary) trackers has the bad habit to track your habits 🤷‍♂️

2025-05-08 22:58:54 UTC

Das muss diese Souveränidingsbums sein!
Biometrie: Passbilder in der Amazon Cloud
https://netzpolitik.org/2025/biometrie-passbilder-in-der-amazon-cloud/
und damit nach dem Cloud-Akt ... äh ... 🤡

2025-04-04 08:35:53 UTC

- reply

I just know Ceph and Galera is used there (was tooted about before). No idea about Proxmox.

2025-04-03 22:02:52 UTC

- reply

a Ceph cluster and a Galera cluster IIRC.

2025-02-05 23:59:29 UTC

E-Brieftasche: EU-Kommission will ständige Personenkennung durch die Hintertür
https://www.heise.de/news/E-Brieftasche-EU-Kommission-will-staendige-Personenkennung-durch-die-Hintertuer-10271634.html
Traurig, dass das nicht einmal überrascht...
#privacy #datenschutz

2025-01-23 18:09:03 UTC

🇬🇧 After running #IzzyOnDroid on my own for over 10 years, we became a small team over a year ago. All done in our spare time, no grants.
That finally changed this week.
We're excited that we're one of seven projects being accepted for the NGI #Mobifree grant! 🥳
Finally we will be able to focus on some more things on our wish list that we've wanted to do for the community for a long time. Stay tuned, we'll update you with details later!
https://nlnet.nl/project/IzzyOnDroid/

2025-01-17 14:27:38 UTC

- reply

AppRemoved: 2024-07-11 on request of author (repo was removed as well) "Apparently it caught attention of site owner too quickly (the site I was scraping the data from) & want to take down the app before the bigger fallout happens."

2025-01-13 17:04:46 UTC

Welcome to the RB family, sNotz 🥳
https://apt.izzysoft.de/packages/com.sunilpaulmathew.snotz
sNotz is a privacy-friendly, secure, and completely offline application to create, customize, and manage simple notes on your android device.
Thanks to @npub1lx9…f523 for making this possible :awesome:
Oh no, RB status says no apps found now: 404 apps (32.5%), we're working on it 🤞
#reproducibleBuilds #IzzyOnDroid

2025-01-06 14:34:03 UTC

- reply

lies den POC nochmal. In den Signaturblöcken kann man alles mögliche verstecken, und dann "anderweitig" zur Ausführung bringen. @npub1nm6…qwg0 @npub1s7p…d8pa @npub1g6j…4s5g

2025-01-06 14:28:35 UTC

- reply

im F-Droid Repository landet die APK Datei 😉 Und das ist in diesem Fall die vom Entwickler. Der Quellcode selbst ist hier ja auch nicht das Problem (dafür wird ja auf RB geprüft) – es sind vielmehr die Signatur-Blöcke. Und die werden, wie Mike schon schrieb, nicht vollständig/korrekt geprüft. @npub1nm6…qwg0 @npub1s7p…d8pa @npub1g6j…4s5g

2025-01-06 12:54:40 UTC

- reply

"und diese durch den Nutzer nicht mehr installierbar sind."
Auch nicht ganz korrekt. Wenn die App bereits auf dem Gerät installiert ist, würde ein Update wohl fehlschlagen. Eine Neuinstallation würde aber (nach meinem Verständnis) nach wie vor funktionieren.

2025-01-02 21:06:56 UTC

- reply

Ever seen the HTML produced by an MS Word export? Blood fountains from your eyes. I once cleaned up such a HTML, and the size of the resulting clean HTML was less than 20% of the original. They even used CSS classes, but then explicitly repeated their definitions every.single.time (like "blabber", with "foo" of course having font size, family, italics, bold already).
But right, worse examples are no excuses…

2024-11-20 17:11:37 UTC

Welcome to the RB family, OpenAthena™ 🥳
https://apt.izzysoft.de/packages/com.openathena
OpenAthena™ is a project that enables consumer and professional drones to identify precise locations based on their images.
After getting rid of some Umlaut in a file name, the code did not only compile – but resulted in a reproducible build. So the new release that shows up in about 2 hours from now will have the green shield up :awesome:
#reproducibleBuilds #IzzyOnDroid

2024-11-17 20:19:02 UTC

Welcome to the RB family, Canta 🥳
https://apt.izzysoft.de/packages/org.samo_lego.canta
Canta allows you to uninstall any app from your device, even if you don't have root access.
Once more, joint efforts by IzzyOnDroid and the author led to a successful RB :awesome:
RB status at IoD now: 341 apps (28.2%)
#reproducibleBuilds #IzzyOnDroid

2024-10-25 13:57:56 UTC

- reply

Indeed, that was a day before the MR I've linked was merged. Then it seems @npub1fh7…ee83 was able to solve the issue without their help – thanks to the Codeberg crew for getting that done amidst their current double-heavy workload! 🙇

2024-10-25 12:55:34 UTC

- reply

Nope, see https://gitlab.com/fdroid/fdroiddata/-/merge_requests/16090/diffs – F-Droid instead set up mirrors at GitLab. The app you've linked to uses that mirror. As for line 7, that probably shows "Source" instead of "Repo".
https://cdn.masto.host/floss/media_attachments/files/113/368/159/125/390/455/original/87f56384b7ebfca6.png

2024-07-08 18:49:38 UTC

- reply

(2/2)
* Media Browser: folder-based media browsing
* Rush: search, view, save and share lyrics
* GlassDown: client for APKMirror
* Beans: a virtual scratchmap of the world
* OrgNote: notes like with Org Roam
Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:

2024-07-08 18:49:21 UTC

Did you miss the #AndroidAppRain while I was at DroidCon? Get ready for a heavy one then! 17 updated and 9 added apps at https://apt.izzysoft.de/fdroid for you today :awesome:
* Share via web: share files and apps over HTTP (device-to-device)
* Rank My Favs: rank your favorite stuff
* InnerTune: Youtube Music client
* Calculator You: simple calculator with MaterializedYou design
(1/2)