Nostr notes by Izzy

Glad you like it 🤗 Our metadata say it was added already on ...

2026-06-22T21:25:51Z

In reply to nevent1q…drwf
_________________________

Glad you like it 🤗 Our metadata say it was added already on 2021-10-07, though 🙈 But indeed, the latest updated just landed today. Enjoy! :awesome:

apart from which, this "advert" is misleading: "Open ...

2026-06-18T10:07:12Z

In reply to nevent1q…j5mp
_________________________

apart from which, this "advert" is misleading: "Open Source AT Protocol". Even if that's true – what about the rest of this "service"? Don't e.g. Google, MS & Co offer their siloed mail services, providing access via the "Open Source IMAP protocol"? What kind of argument is this – just picking a tiny screw to drop the term "Open Source" in? Apart from me also doubting the "privacy preserving", given you need to ID yourself without need just to be able to use it. [@_elena](https://mastodon.social/@_elena )

Oh, the clowns are back again. Alleged malware, but no URLs. Does ...

2026-06-12T09:57:57Z

Oh, the clowns are back again. Alleged malware, but no URLs. Does someone have a bot to auto-respond, requesting a review with a text like "all indicated URLs have been cleared", so I don't have to do that manually each time? 🤦‍♂️

#Google #SafeBrowsing

If you don't believe me: ...

2026-06-10T00:26:12Z

In reply to nevent1q…jznd
_________________________

If you don't believe me:

https://emilwu.tw/en/news/github-instability-ai-surge-ghostty/

https://www.contextstudios.ai/blog/github-is-breaking-under-ai-codings-weight

https://mrshu.github.io/github-statuses/

GH uptime is down to 86% – some call that "operational". For a core service, this is rather an imposition. Even Gradle downloads are affected, as their links are just redirects to GitHub releases. Write your app in Flutter, and use several git submodules – you will have a chain of breakpoints (one clone/download will certainly fail – and you have many there for each build).

Plus: eggs, basket…

and yes, those increasing error rates at Github are caused by ...

2026-06-10T00:09:53Z

In reply to nevent1q…appl
_________________________

and yes, those increasing error rates at Github are caused by "agentic workflows". So if you use much LLM stuff: that's part of the problem. Probably a coincidence that in most cases, apps with build issues have LLMs involved?

Until now, I've tried my best to get ALL builds fixed. But if a failed build was done from a commit other than the tagged one, I'll soon have to instead simply mark it failed and drop the dev only a note, to be more careful with future releases.

Thanks to Githubs increasing error rates (5xx errors, clones ...

2026-06-09T23:47:11Z

Thanks to Githubs increasing error rates (5xx errors, clones timing out, incomplete downloads, etc), the number of builds we have to fix every day, has massively increases, too. It gets harder to keep up with this, by the day.

So if you have an app at #IzzyOnDroid and want it to stay reproducible, please at least take care to build your releases from clean trees at the tagged commit, see https://izzyondroid.org/docs/reproducibleBuilds/RBDevHints/ – to help lower our load 🙏 Thanks in advance!

:boost_love: #ReproducibleBuilds

Since my last $DAYJOB was canceled 12/2025, I'm working ...

2026-05-20T14:50:20Z

Since my last $DAYJOB was canceled 12/2025, I'm working full-time at IzzyOnDroid – without any pay. Living on prior savings, I'm now slowly running out of funds. So if you like our service & support, and want it to stay at the current level (and above): any help is appreciated! This can be donations (see: https://android.izzysoft.de/help?topic=support_us – everyone $/€ 1 per month, and I'm covered) – or part-time remote freelance jobs (apart from my IoD experience, I'm an Oracle DBA).

:boost_love: #FollowerPower

Seems like the question of #GitHub becoming fully unusable is not ...

2026-05-07T17:53:21Z

Seems like the question of #GitHub becoming fully unusable is not "if", but rather "when". We feel the issues now for the 5th month, and it's getting worse by the day. Today, out of 13 builds, 12 failed – either because of stalling when cloning the repo from GitHub or one of the submodules, or some other GitHub error message. Some builds we had to run 8 times to finally pass (and some of those only to find out their recipe needs adjustments, as e.g. the upstream APK was not built from the tag)…

Did I say GitHub became mostly unusable? > The main driver is ...

2026-04-30T10:08:02Z

Did I say GitHub became mostly unusable?

> The main driver is a rapid change in how software is being built. Since the second half of December 2025, agentic development workflows have accelerated sharply. By nearly every measure, the direction is already clear: repository creation, pull request activity, API usage, automation, and large-repository workloads are all growing quickly.

https://github.blog/news-insights/company-news/an-update-on-github-availability/

"agentic development workflows", huh? "exponential growth"…

Remember? "Sideloading" is here to stay, and won't go ...

2026-04-16T18:20:26Z

Remember? "Sideloading" is here to stay, and won't go away, they said? Don't be afraid, they said? Something something "we heard you"? Suuuure! Who would ever doubt it!

Attached the copy of a mail developers with apps in the PlayStore CURRENTLY receive. Please, read the text in the red box carefully:

"Apps not registered by September 2026 WILL NO LONGER BE INSTALLABLE ON CERTIFIED ANDROID DEVICES in select countries."

See an exception there? I don't.

#Google #Android #DeveloperCertfication

Copilot Is 'For Entertainment Purposes Only,' According ...

2026-04-06T22:00:46Z

Copilot Is 'For Entertainment Purposes Only,' According To Microsoft's ToS
https://slashdot.org/story/26/04/06/046228/copilot-is-for-entertainment-purposes-only-according-to-microsofts-tos

So please, if you use Windows 11 on a computer: remember that it's only an entertainment system, and should not be used for serious stuff!

I blocked Google's tracking domains at my router and saw ...

2026-03-31T17:31:43Z

I blocked Google's tracking domains at my router and saw exactly what my Android was hiding
https://www.makeuseof.com/blocked-googles-tracking-domains-saw-exactly-what-android-hiding/

Most Android privacy toggles are rather placebos? I'm shocked!

#Google #Tracking

"Google Safe Browsing missed 84% of confirmed phishing sites ...

2026-03-25T12:12:38Z

In reply to nevent1q…zzpj
_________________________

"Google Safe Browsing missed 84% of confirmed phishing sites in our dataset. […] Google is, quite literally, hosting phishing attacks on its own infrastructure and not catching them with its own detection tools"

https://www.norn-labs.com/blog/huginn-report-feb-2026

#Google #SafeBrowsing

Day 4 again, without any response. Quite a reliable service that: ...

2026-03-25T11:34:06Z

In reply to nevent1q…rpuv
_________________________

Day 4 again, without any response. Quite a reliable service that: you can rely on it to let you wait. What does that run on, that it takes that long? An Arduino Pico? Needless to say that the alleged malware file does not even exist, and never was malicious.

Filed another review request.

Again: disable that stuff. Seems to have more false positives than real stuff. Especially as entire domains hosting the real stuff (like storage.googleapis.com) are excluded from scan.

#SafeBrowsing #Google

Day 4. A response, finally. The usual clown message: Review ...

2026-03-20T16:08:18Z

In reply to nevent1q…xf0w
_________________________

Day 4. A response, finally. The usual clown message: Review failed. Well, the "clown message" is the one in the attached graphic: They don't know themselves. Something something link, but they don't know which. Or, in other words: "These URLs host malware or unwanted software downloads: None". 🤦‍♂️

If that's how reliable their services are, maybe they should NOT hold the keys to the entire Internet (and app stores)? 🤔

#Google #SafeBrowsing

And there I thought developer mode was discouraged for ...

2026-03-20T10:41:22Z

In reply to nevent1q…9avj
_________________________

And there I thought developer mode was discouraged for "standard users":

"Developer modes expose features of the mobile operating system (MOS) that are not available during standard operation. An adversary may leverage a vulnerability inherent in a developer mode to compromise the confidentiality, integrity, and availability of DOD sensitive information. Disabling developer modes mitigates this risk."

(Tenable Audit: https://www.tenable.com/audits/items/DISA_STIG_Google_Android_15_COBO_v1r2-AirWatch.audit:3722d2c6e738b1955d48f57783163430)

So, this is about security? LMAO…

Day 3 now. Still no response to my review request. I've filed ...

2026-03-19T13:32:25Z

In reply to nevent1q…r0cu
_________________________

Day 3 now. Still no response to my review request. I've filed another now as reminder. Still wonder what takes their bots that long. But well, after all, it took them 9 years to find the initial file. Hope it doesn't take the same time now to clear it again 🙈

I had filed a reevaluation request before I tooted this. 2 days ...

2026-03-18T11:38:44Z

In reply to nevent1q…dutn
_________________________

I had filed a reevaluation request before I tooted this. 2 days later, no reply yet (why does their bot take THAT long?). Instead I hear, another "fine tool" kicked in: Play "Protect" refuses installation of the allegedly malicious app, and even uninstalls them AUTOMATICALLY, without asking you! https://github.com/sunilpaulmathew/AppVaultX/issues/6#issuecomment-4079105010

Another rather questionable tool you might consider to get rid of (unless you install a lot from "questionable sources").

#Google #SafeBrowsing #PlayProtect

Of course the review failed (as usual, without a notification ...

2026-03-16T16:09:59Z

In reply to nevent1q…62w5
_________________________

Of course the review failed (as usual, without a notification mail). Now they pick random APK files: remove one, then it's the next. Until the repo is empty, I guess. Snippet updated.

Disable "Safe" browsing, it's snake oil as you can see. We've been libeled now many times, always false positives. See https://gitlab.com/-/snippets/4909577#notes-on-how-to-disable-google-safebrowsing-in-browsers-on-android for how to disable it.

Of course all our APKs have been scanned, multiple times, with many engines. They're clean. Says even G's own scanner.

#Google #SafeBrowsing

Oh, did I mention that that file does not even exist – for 2 ...

2026-03-15T20:22:57Z

In reply to nevent1q…dutn
_________________________

Oh, did I mention that that file does not even exist – for 2 month now? 🤦‍♂️ So even if it would have been malicious: a timely warning for those who trust that snake oil, would you agree? How often do they update, I wonder…

Oh my, those clowns again. They cannot even tell servers apart, ...

2026-03-15T20:09:00Z

Oh my, those clowns again. They cannot even tell servers apart, but want to play the "Safety Police"? What are they doing for a living, by the way (apart from slurping and selling our data)?

Yes, that's the same file as in January. On a different server. But they flag yet another, that does not even have that file. Incompetent folks, they should shut down that "service". Will they ever stop that nonsense?!?

#Google #SafeBrowsing #failure

> We know users will rarely visit the site so the Client(s) ...

2026-02-18T22:37:05Z

In reply to nevent1q…n0le
_________________________

> We know users will rarely visit the site so the Client(s) will get a banner soon too.

The new release of Neo Store (published today) already has it. And our website has it as well: https://izzyondroid.org/

And while the banner correctly states F-Droid being under threat: ...

2026-02-17T14:24:18Z

In reply to nevent1q…n0le
_________________________

And while the banner correctly states F-Droid being under threat: it's not just F-Droid, it's the free Android world being under threat. In its entirety. So the same applies to IzzyOnDroid – but also to Obtainium & Co. And if you think you could still use Aurora to access the PlayStore, think again: how would you install Aurora in the first place?

This is the empire striking. The alleged "security" is just a way to circumvent the requirement to open for alternative stores.

Gith-ick-ub currently it seems. Tried from multiple machines in ...

2026-02-09T17:07:38Z

Gith-ick-ub currently it seems. Tried from multiple machines in different locations, `git ls-remote` just stalls. Fun with RBs then today…

it would also help if you'd publish releases with their ...

2026-02-06T18:25:57Z

In reply to nevent1q…h4z9
_________________________

it would also help if you'd publish releases with their corresponding APKs attached. Only that way, Reproducible Builds can be supported (which we and F-Droid (npub1mtr…trt0) have, see e.g. https://izzyondroid.org/about/security/ReproducibleBuilds/ for a short intro).

I don't know about the size of your APK, so I cannot tell if we could take it in at IzzyOnDroid – but if it's below 30 MB, be welcome to apply (once the APKs are available, as we always ship the APKs built & signed by their devs) LΞX/NØVΛ 🇪🇺 (npub1ec0…qkpw)

For those attending #FOSDEM and interested in the topic: make ...

2026-01-28T11:52:05Z

In reply to nevent1q…3pva
_________________________

For those attending #FOSDEM and interested in the topic: make sure to attend Marc's talk "Fear and Loathing in the App Stores: when FLOSS principles collide with the Gatekeeper interests" (https://fosdem.org/2026/schedule/event/TYZH97-fear-loathing-app-stores/), which covers this topic. We will be there, and also be ready to answer questions.

Of course we can also be found at our stand in UD2-02 😉

Big thanks to Marc Prud'hommeaux (npub1s3u…fcs2) from the F-Droid (npub1mtr…trt0) board for picking this up!

#IzzyOnDroid #fdroid #FOSDEM2026 #resist #GateKeepers

It's taken them more than 36h to reevaluate their ...

2026-01-28T11:06:02Z

In reply to nevent1q…3pva
_________________________

It's taken them more than 36h to reevaluate their "finding". The files are non-existing for at least 38h. Still: review failed. They now mark us red for a file that does not even exist! How should one trust such a service to be safe – and not just a random annoyance?

Honestly, if it's THAT reliable, rather turn it off. It seems to be rather useless (for you and me), and utilized for censorship (or how else should one understand this?)

#Google #Safebrowsing

Google is now marking EVERY SINGLE APK at our repository as ...

2026-01-25T12:07:55Z

Google is now marking EVERY SINGLE APK at our repository as "Malware site issue". Congrats, "Safe" browsing.

Of course there is not a single malware there, everything is scanned multiple times. And I bet they excluded *.google.com from their scan or the entire PlayStore would be red by now, too…

Calling out to all of you: Please use https://safebrowsing.google.com/safebrowsing/report_error/ to report the links as "safe"!

https://apt.izzysoft.de/fdroid/repo/com.apkupdater_52.apk is the one console reports.

:boost_love:

#serviceToot #izzyOnDroid #fediPower

So did I, which is why I didn't check. But then, who'd ...

2026-01-20T22:17:11Z

In reply to nevent1q…w392
_________________________

So did I, which is why I didn't check. But then, who'd have thought installing a graphics driver would require more than half of the system partition (here: I tried to install ROCm/AMDGPU on a test machine, which required "25 GB (!!) additional disk space)…

Checking disk space must be complicated. Package dependencies are easier… 🙊 💨

OK, TIL (Today I Learned): If "apt install" tells you ...

2026-01-20T21:31:46Z

OK, TIL (Today I Learned):

If "apt install" tells you "after this installation, XX GB additional disk space will be used" – that means that YOU SHOULD LOOK if that's available. Because, APT DOES NOT – it simply … well, stops working when the disk is full 🤦‍♂️

Have fun then cleaning up. Glad I ran a Timeshift backup immediately before…

(EDIT: it was `apt` in my case, not `apt-get`. But such a thing simply should not happen at all.)

#Debian #apt

Issue filters! 🥳 How cool is that! Was missing it for sooo ...

2026-01-15T14:36:54Z

In reply to nevent1q…wwkg
_________________________

Issue filters! 🥳 How cool is that! Was missing it for sooo looong… Thank you so much!!!

We are receiving reports that Google flags our repo as ...

2025-12-30T01:35:27Z

We are receiving reports that Google flags our repo as "having dangerous apps" or being a "dangerous site" – texts being very vague, no proof given (nor did they inform us). They also link to a page they call "Transparency Report" – which is of the same vagueness, but definitely not transparent (https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fapt.izzysoft.de%2Ffdroid%2F&hl=en)

We're not aware of any such dangerous content. All apps on our repo are properly scanned, see https://izzyondroid.org/about/security/

#IzzyOnDroid #serviceToot

Who had the funny idea to turn tags to lowerCase on ...

2025-11-27T20:12:44Z

Who had the funny idea to turn tags to lowerCase on auto-completion in the Mastodon Web UI? That's kinda nasty. Especially if I select a tag like "AndroidAppRain" (spelled exactly like that in the suggestion) by typing "AndroidA" and let it auto-complete: "androidappRain" is *NOT* what I'd expect.

I've checked the preferences, but found nothing. Any hints on how to set this to sane defaults? Screenreaders have it easier with CamelCase…

Michael Downey :notAI: (npub1ufx…u2t8) FLOSS.social :mastodon_oops: (npub1qus…uxmz) some setting on instance level maybe?

Is Google Killing Android Sideloading? F-Droid Says Yes, Google ...

2025-10-29T11:34:01Z

Is Google Killing Android Sideloading? F-Droid Says Yes, Google Says No
https://phandroid.com/2025/10/29/is-google-killing-android-sideloading-f-droid-says-yes-google-says-no/

We also say "yes". It will harm the FOSS world. There are people who cannot "dox" themselves for "Google verification", or risk their personal safety.

Plus after all: can or should we really trust our personal data to a company whose business consists of selling them?

💡 A Habit Tracker that comes with a bunch of (proprietary) ...

2025-07-16T14:11:42Z

💡 A Habit Tracker that comes with a bunch of (proprietary) trackers has the bad habit to track your habits 🤷‍♂️

Das muss diese Souveränidingsbums sein! Biometrie: Passbilder in ...

2025-05-08T22:58:54Z

Das muss diese Souveränidingsbums sein!

Biometrie: Passbilder in der Amazon Cloud
https://netzpolitik.org/2025/biometrie-passbilder-in-der-amazon-cloud/

und damit nach dem Cloud-Akt ... äh ... 🤡

I just know Ceph and Galera is used there (was tooted about ...

2025-04-04T08:35:53Z

In reply to nevent1q…yhns
_________________________

I just know Ceph and Galera is used there (was tooted about before). No idea about Proxmox.

a Ceph cluster and a Galera cluster IIRC.

2025-04-03T22:02:52Z

In reply to nevent1q…h2an
_________________________

a Ceph cluster and a Galera cluster IIRC.

E-Brieftasche: EU-Kommission will ständige Personenkennung durch ...

2025-02-05T23:59:29Z

E-Brieftasche: EU-Kommission will ständige Personenkennung durch die Hintertür
https://www.heise.de/news/E-Brieftasche-EU-Kommission-will-staendige-Personenkennung-durch-die-Hintertuer-10271634.html

Traurig, dass das nicht einmal überrascht...

#privacy #datenschutz

🇬🇧 After running #IzzyOnDroid on my own for over 10 years, ...

2025-01-23T18:09:03Z

🇬🇧 After running #IzzyOnDroid on my own for over 10 years, we became a small team over a year ago. All done in our spare time, no grants.

That finally changed this week.

We're excited that we're one of seven projects being accepted for the NGI #Mobifree grant! 🥳

Finally we will be able to focus on some more things on our wish list that we've wanted to do for the community for a long time. Stay tuned, we'll update you with details later!

https://nlnet.nl/project/IzzyOnDroid/

AppRemoved: 2024-07-11 on request of author (repo was removed as ...

2025-01-17T14:27:38Z

In reply to nevent1q…c4y6
_________________________

AppRemoved: 2024-07-11 on request of author (repo was removed as well) "Apparently it caught attention of site owner too quickly (the site I was scraping the data from) & want to take down the app before the bigger fallout happens."

Welcome to the RB family, sNotz 🥳 ...

2025-01-13T17:04:46Z

Welcome to the RB family, sNotz 🥳

https://apt.izzysoft.de/packages/com.sunilpaulmathew.snotz

sNotz is a privacy-friendly, secure, and completely offline application to create, customize, and manage simple notes on your android device.

Thanks to Sunil Paul Mathew Menacherry (npub1lx9…f523) for making this possible :awesome:

Oh no, RB status says no apps found now: 404 apps (32.5%), we're working on it 🤞

#reproducibleBuilds #IzzyOnDroid

lies den POC nochmal. In den Signaturblöcken kann man alles ...

2025-01-06T14:34:03Z

In reply to nevent1q…rvwz
_________________________

lies den POC nochmal. In den Signaturblöcken kann man alles mögliche verstecken, und dann "anderweitig" zur Ausführung bringen. Stefan (npub1nm6…qwg0) Marcel Klehr (npub1s7p…d8pa) Mike Kuketz 🛡 (npub1g6j…4s5g)

im F-Droid Repository landet die APK Datei 😉 Und das ist in ...

2025-01-06T14:28:35Z

In reply to nevent1q…ukh4
_________________________

im F-Droid Repository landet die APK Datei 😉 Und das ist in diesem Fall die vom Entwickler. Der Quellcode selbst ist hier ja auch nicht das Problem (dafür wird ja auf RB geprüft) – es sind vielmehr die Signatur-Blöcke. Und die werden, wie Mike schon schrieb, nicht vollständig/korrekt geprüft. Stefan (npub1nm6…qwg0) Marcel Klehr (npub1s7p…d8pa) Mike Kuketz 🛡 (npub1g6j…4s5g)

"und diese durch den Nutzer nicht mehr installierbar ...

2025-01-06T12:54:40Z

In reply to nevent1q…5q2j
_________________________

"und diese durch den Nutzer nicht mehr installierbar sind."

Auch nicht ganz korrekt. Wenn die App bereits auf dem Gerät installiert ist, würde ein Update wohl fehlschlagen. Eine Neuinstallation würde aber (nach meinem Verständnis) nach wie vor funktionieren.

Ever seen the HTML produced by an MS Word export? Blood fountains ...

2025-01-02T21:06:56Z

In reply to nevent1q…d8er
_________________________

Ever seen the HTML produced by an MS Word export? Blood fountains from your eyes. I once cleaned up such a HTML, and the size of the resulting clean HTML was less than 20% of the original. They even used CSS classes, but then explicitly repeated their definitions every.single.time (like "blabber", with "foo" of course having font size, family, italics, bold already).

But right, worse examples are no excuses…

Welcome to the RB family, OpenAthena™ 🥳 ...

2024-11-20T17:11:37Z

Welcome to the RB family, OpenAthena™ 🥳

https://apt.izzysoft.de/packages/com.openathena

OpenAthena™ is a project that enables consumer and professional drones to identify precise locations based on their images.

After getting rid of some Umlaut in a file name, the code did not only compile – but resulted in a reproducible build. So the new release that shows up in about 2 hours from now will have the green shield up :awesome:

#reproducibleBuilds #IzzyOnDroid

Welcome to the RB family, Canta 🥳 ...

2024-11-17T20:19:02Z

Welcome to the RB family, Canta 🥳

https://apt.izzysoft.de/packages/org.samo_lego.canta

Canta allows you to uninstall any app from your device, even if you don't have root access.

Once more, joint efforts by IzzyOnDroid and the author led to a successful RB :awesome:

RB status at IoD now: 341 apps (28.2%)

#reproducibleBuilds #IzzyOnDroid

Indeed, that was a day before the MR I've linked was merged. ...

2024-10-25T13:57:56Z

In reply to nevent1q…cmjm
_________________________

Indeed, that was a day before the MR I've linked was merged. Then it seems Codeberg (npub1fh7…ee83) was able to solve the issue without their help – thanks to the Codeberg crew for getting that done amidst their current double-heavy workload! 🙇

Nope, see ...

2024-10-25T12:55:34Z

In reply to nevent1q…pc2r
_________________________

Nope, see https://gitlab.com/fdroid/fdroiddata/-/merge_requests/16090/diffs – F-Droid instead set up mirrors at GitLab. The app you've linked to uses that mirror. As for line 7, that probably shows "Source" instead of "Repo".

(2/2) * Media Browser: folder-based media browsing * Rush: ...

2024-07-08T18:49:38Z

In reply to nevent1q…86hj
_________________________

(2/2)

* Media Browser: folder-based media browsing
* Rush: search, view, save and share lyrics
* GlassDown: client for APKMirror
* Beans: a virtual scratchmap of the world
* OrgNote: notes like with Org Roam

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:

Did you miss the #AndroidAppRain while I was at DroidCon? Get ...

2024-07-08T18:49:21Z

Did you miss the #AndroidAppRain while I was at DroidCon? Get ready for a heavy one then! 17 updated and 9 added apps at https://apt.izzysoft.de/fdroid for you today :awesome:

* Share via web: share files and apps over HTTP (device-to-device)
* Rank My Favs: rank your favorite stuff
* InnerTune: Youtube Music client
* Calculator You: simple calculator with MaterializedYou design

(1/2)