Post #3421828

2026-06-26 11:53 UTC

Finally got my hands on device with @GrapheneOS@grapheneos.social :blobcataww: Web installer experience was super smooth :blobcatthumbsup: Now here's a question to you good folks: why @fdroidorg@floss.social does not come out-of-the-box? Forums lead me to multiple explanations and opinions, but I find confusing suggestion to pull built binaries from some GitHub pages rather than consuming from a shop with reproducible builds and real reviews on app submit :blobcatthonkang: I've experienced that myself when submitted Bouncing Logo - whole process made me appreciate F-Droid even more :ablobcatheartsqueeze: Folks who say publishing on F-Droid is slow, try doing that on Google Play or Samsung Galaxy Store when you are not a big popular vendor - it takes ages :this_is_fine: I don't know better way to get open source apps than F-Droid. Do you? Would appreciate any details :fox_jump: #appstore #grapheneos #fdoid

Replies (1)

@herrbaert42@infosec.exchange 2026-06-27 06:34

@gytisrepecka@social.gyt.is @GrapheneOS@grapheneos.social @fdroidorg@floss.social @gytisrepecka@social.gyt.is @GrapheneOS@grapheneos.social @fdroidorg@floss.social here are some reads on why no fdroid and no aurora F-Droid copypasta (updated v1.4) -# [Privsec.dev - F-Droid Security Issues]() -# [X/Twitter - Uncaught Wireguard Self Update Change]() -# [Codeberg - IronFox Comment on F-Droid Security Issues]() -# [Openwall - F-Droid Certificate Pinning Bypass PoC]() -# [Github - CatimaLoyalty Reproducible Builds Issue]() -# [Gitlab - Outdated AGP On Makes Builds Fail]() -# [Github - F-Droid Recommendation On Vulnerable Game]() **Aurora Store copypasta (updated v1.1 - no link previews & new links)** -# [No signature check tweet 1]() & [No signature check tweet 2]() -# [Random accounts stored on Aurora servers]() -# [Violating Play Store TOS]() -# [No privacy benefit via SDK/libraries]() -# [False app claims about permissions and trackers]() -# [Limited Store usage like Paid apps etc.]()

Open ##3421826