Andromxda 🇺🇦🇵🇸🇹🇼

:anarchy:

https://justmytoots.com/@andromxda@infosec.exchange

tootfinder

Public Key

npub1gtk03u6nxq04um4zuf4xn6tsm9r5zqsd9um2g7ekvs29773uejwshc6cj7

NIP-05 Address

Andromxda@infosec-exchange.mostr.pub

Profile Code

nprofile1qqsy9m8c7dfnq867d63wy6nfa9cdj36pqgxj7d4y0vmxg9zl0g7ve8gpz3mhxue69uhhyetvv9ujumn0wd68ytnzvuq3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7efmf3p

Publishing to

relay.nostr.bg

relay.damus.io

nos.lol

Author Public Key

npub1gtk03u6nxq04um4zuf4xn6tsm9r5zqsd9um2g7ekvs29773uejwshc6cj7

Show more details

Last Notes

2025-10-13 22:40:04 UTC

- reply

@nprofile…f9sr Would you technically be allowed to publish the compiled binaries with the patches applied and debug symbols included under the embargo?

2025-10-12 11:44:35 UTC

- reply

@nprofile…m8mr You used to have an account on infosec.exchange, right? We have an 11000 character limit here. This would be perfect for long announcements, like your recent announcement and explanation of security preview releases. That way, you wouldn't have to make long threads, which seems to annoy some people in heated discussions.

2025-07-22 14:59:30 UTC

- reply

@nprofile…m8mr Typical low-quality Fox News reporting, nothing to be surprised about

2025-06-19 09:59:20 UTC

- reply

@nprofile…359z Instead of acknowledging that Daniel Micay has been the victim of harassment by Kiwi Farms members, including Louis Rossmann, and many others for a long time, you (and the other people in this thread) try to blame it on him somehow. You knowingly downplay how bad Rossmann and Kiwi Farms are and instead focus on painting a negative picture of Daniel Micay and the GrapheneOS team.
I don't want to suggest that you are doing this out of malicious intent, but there is more than enough misinformation about the GrapheneOS project and its developers on the internet, and unfortunately here in the Fediverse as well.
Such accusations further damage the project's reputation and prepare the ground for malicious misinformation.

2025-06-19 09:44:49 UTC

- reply

@nprofile…vqyr You do realize that Kiwi Farms is a far-right forum dedicated to doxxing and stalking people online, including swatting attacks and other severe forms of harassment, right? After the website was banned by Cloudflare because it poses "an imminent and emergency threat to human life" (Cloudflare's wording, not mine), it's VanwaTech's CDN, a company founded by Nicholas Lim, a literal Neo-Nazi and QAnon supporter. These are the kind of people you are defending. Just acknowledge that.
I highly recommend reading the Wikipedia article: https://en.wikipedia.org/wiki/Kiwi_Farms
Louis Rossmann has a verified account on Kiwi Farms, so he openly supports Nazis too.
@nprofile…359z I saw in your profile that you claim to be a leftist, bisexual, and autistic. How can you at the same time support a platform run by Nazis, which is notorious for facilitating harassment against trans and other queer people, as well as disabled and neurodivergent individuals?

2025-06-04 05:57:16 UTC

@nprofile…m8mr Has GrapheneOS put any measures in place to mitigate TikTag?

2025-05-24 06:54:58 UTC

- reply

@nprofile…m8mr Couldn't you rip them out of the stock Pixel OS image using adevtool, similar to how you do it with carrier config data, and offer them in the GrapheneOS App Store?

2025-03-10 18:34:26 UTC

- reply

@nprofile…m8mr Is the VM image downloaded from Google servers? If so, do you plan to offer a proxy, like you do for other Google services?

2025-02-13 21:36:53 UTC

- reply

@nprofile…gp6r What exactly?

2025-02-13 21:34:54 UTC

- reply

@nprofile…gp6r Why do you think this is an issue?

2025-01-27 14:18:43 UTC

- reply

@nprofile…mjc8 @nprofile…rsu8 @nprofile…m8mr
Ich würde eher sagen: Vorsicht vor Missverständnissen und Falschinformationen!
Accrescent ist keine Alternative oder Ersatz für F-Droid. Die beiden Systeme sind fundamental unterschiedlich und lassen sich nicht wirklich miteinander vergleichen. Accrescent ist eine Open Source Alternative zum Google Play Store und dessen App-Distributionsmodell. Wie im Play Store kompilieren Entwickler ihre Apps hier selbst und signieren sie mit ihren eigenen Schlüsseln. Das ist der große Unterschied zu F-Droid. Hier wird nämlich nur der Source Code vom Entwickler veröffentlicht und die Kompilierung und Signierung der App erfolgt auf einem F-Droid Server und ohne Einflüsse des Entwicklers (mit Ausnahme von Apps, welche Reproducible Builds unterstützen). Der Fokus auf Privatsphäre bei Accrescent liegt darin, dass Nutzer im Vergleich zum Play Store kein Konto benötigen, mit dem sie sich anmelden und dass das Backend Open Source ist. Der Nutzer ist selbst dafür verantwortlich zu entscheiden, welchen Apps er denn seine Daten anvertraut und welchen nicht. Die Apps werden so zum Download angeboten, wie sie vom Entwickler bereit gestellt werden. Aus der Perspektive der Sicherheit ist dieser Ansatz dem von F-Droid klar überlegen. Die Sicherheitsmängel von F-Droid sind klar dokumentiert: https://privsec.dev/posts/android/f-droid-security-issues/

2025-01-17 01:05:36 UTC

@nprofile…m8mr Any comments from you about the current situation regarding Proton and Andy Yen? You've worked with them in the past, right? I'd like to hear your take on this.

2025-01-12 17:18:16 UTC

- reply

@nprofile…m8mr @nprofile…25v6 Consider including a link to Android File Transfer for Linux users. Why don't you also recommend network-based solutions like LocalSend?

2025-01-06 21:13:58 UTC

@nprofile…7pmx Out of curiosity: Are debug logs part of the encrypted database, or are they stored unencrypted?

2024-12-30 07:29:38 UTC

- reply

@nprofile…2n93 > One of the biggest advantages of #GrapheneOS is the ability to have separate VPNs on different profiles.
AFAIK this is the default in AOSP. You also don't need the Private Space to do this, it was possible by using a user profile or work profile (through e.g. Shelter or Insular) before.

2024-12-27 11:57:31 UTC

- reply

@nprofile…2n93 I only use the Owner profile to download apps from the Play Store, so I can transfer them to other profiles. @nprofile…4caj made a pretty great video about this way of installing apps: https://youtube.com/watch?v=IAoCfrqxIEg
I use a separate user profile for all the other stuff. This allows me to quickly lock the profile and put it back in the before first unlock encryption state by just ending the session.

2024-12-26 22:49:16 UTC

- reply

@nprofile…m8mr I saw that you are hiring. I also saw that you have a LinkedIn profile, but you didn't post the job offer there? What's the point of maintaining a LinkedIn account, if you aren't posting job adverts?

2024-12-26 22:31:44 UTC

- reply

@nprofile…m8mr That's pretty unfortunate, I didn't know that. How about directly applying for a grant from Horizon Europe, like other organizations, even ones that you work with, like @nprofile…m7my have successfully done in the past? As far as I know Canada joined the program last year https://euraxess.ec.europa.eu/worldwide/north-america/news/canada-joins-horizon-europe

2024-12-26 16:10:37 UTC

@nprofile…m8mr Consider applying for @nprofile…klwf's Mobifree program
https://nlnet.nl/mobifree/

2024-12-25 02:07:04 UTC

@nprofile…7pmx Is any work currently being done on sweetlies, and are there plans for the future?