News for hackers. Stuff that matters.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by blameitonme on Saturday October 14, 2023 @09:16AM (#37880240)
They only seem to support pixel, although pixels can be bought for cheap when compared to iphones, they're still expensive for countries which are still developing.

For example Im using a device which is 1/4th the price of cheapest first hand pixel that I can get

:(

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by notpushkin on Saturday October 14, 2023 @09:22AM (#37880284)
LineageOS is supported on a bit more devices, and works with microG if you're willing to sacrifice Google Pay for better battery life and less privacy violations: https://lineage.microg.org/
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by snapplebobapple on Saturday October 14, 2023 @09:43AM (#37880426)
This worked ok, but wasn't as nice as grapheneos' solution so I ended up upgrading to a pixel once my cheap chinesium phone was sufficiently old and haven't looked back since. If you do the microg route you should be using a throw away gmail account you don't care about losing with the aurora store (if you need access to the google play store) because there is a non zero chance they ban your account.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by notpushkin on Saturday October 14, 2023 @09:59AM (#37880524)
> a throw away gmail account you don't care about losing with the aurora store

They also have a pool of accounts you can use by clicking “anonymous”. They do get banned frequently, and you have to re-login once in a while (for me it's almost every time I want to download something new again), but it is definitely usable.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by wkat4242 on Saturday October 14, 2023 @05:35PM (#37884477)
It's a lot less usable lately because of the "Oops this account is rate limited" error unfortunately. Sometimes it takes me 10 tries. Updates are fine though, it's just searching for new apps that trigger it.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by notpushkin on Sunday October 15, 2023 @05:52AM (#37888418)
Yeah, I thought search was completely broken tbh. Usually I search in browser then use “Open in app” to open in Aurora and download.

Maybe they can add some web scraping thing to sidestep this issue completely?

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by sspiff on Saturday October 14, 2023 @11:24AM (#37881199)
Interesting, can I still use the Play Store with mircoG?

I already run LineageOS, but with Play services. I would like to be able to ditch Play services, but still need the Play store for things like my banking app, and an app to log in to government services.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by mindslight on Saturday October 14, 2023 @12:41PM (#37881965)
[delayed]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by notpushkin on Sunday October 15, 2023 @05:59AM (#37888453)
I've heard something about using Play Store proper with microG, but obviously that's very flaky. Aurora Store is the way to go.

And banking / government apps tend to work in Europe (at least the ones I have tried). Notable exceptions for me are Revolut (shame!) and McDonalds (who knew microG is the healthier option haha). Of course, in the US things might be vastly different.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by sspiff on Thursday October 19, 2023 @11:20AM (#37944110)
In my country (Belgium), mobile payments are a big thing using the national payment network (Bancontact). Lots of small shops don't accept cards and only do mobile payments because of the lower transaction fees.

These mobile payments only work with your banks app or a dedicated app (Payconiq).

My current approach is to put all these apps in my work profile which I can turn off (using Insular from F-Droid). Only apps for which I need background activity or instant notifications (Signal, an open source podcast app, and sadly WhatsApp) are installed in the main profile.

Sadly, this approach still requires me to have Google services always running in the background for a functioning Play store in my work profile.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by HansHamster on Saturday October 14, 2023 @11:58AM (#37881525)
LineageOS unfortunately dropped support for my Moto G4 relatively quickly after I installed it and it only was supported up to Android 7.1. I have been running an unofficial build of 8.1 ever since, but that is also horribly outdated by now.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by tortoise_in on Saturday October 14, 2023 @01:10PM (#37882254)
Dude buy something new
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by HansHamster on Saturday October 14, 2023 @01:19PM (#37882346)
But why waste the money? I intend to use this thing until it breaks...
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by slikrick on Saturday October 14, 2023 @01:30PM (#37882439)
it's not a waste of money, that android version is a security mess
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by HansHamster on Saturday October 14, 2023 @01:50PM (#37882593)
It is for me. And there is nothing important on my phone so it is not a huge concern. And why do we have to accept that phones just turn into garbage after a few years? Even my old 2009 laptop* still runs an up-to-date OS but my 2016 phone is obsolete after 2-3 years?

* but I have to admit that the hardware is quite slow

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by eks391 on Saturday October 14, 2023 @02:37PM (#37883030)
> And why do we have to accept that phones just turn into garbage after a few years? Even my old 2009 laptop* still runs an up-to-date OS but my 2016 phone is obsolete after 2-3 years?

It is because computers run one of a few available OS's. The OS is being maintained by the distributer (MS, Apple, Google) and your hardware is good as long as the drivers are still receiving updates.

Phones are different because even though everyone only uses iOS or Android, every Android manufacturer puts their own layer onto Android, so Google can continusously update it but the manufacturer might not. Most companies only maintain their phones for about 3 years, giving a significantly reduced lifetime than computers.

It still works fine, from from a security perspective, keeping the phone without patch support is a bad idea.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by HansHamster on Saturday October 14, 2023 @03:08PM (#37883286)
I mean, I know why it happens, but that doesn't mean I'm happy about accepting it.

It is really annoying how every vendor cobbles together a Frankenstein abomination of a kernel with just the right drivers and patches and good luck trying to run anything else. But I also understand that they (except maybe for Google) have no interest or incentive to clean up this mess.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by berdario on Saturday October 14, 2023 @07:11PM (#37885133)
That's true, and I think that we should be rewarding the companies that are bucking the trend:

Fairphone 5 will receive security updates for 8 years

Pixel 8 will receive updates for 7 years

iPhone 15 will receive updates for 6+ years (apparently, Apple has a track record of between 6 and 8 years)

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by yjftsjthsd-h on Saturday October 14, 2023 @05:51PM (#37884573)
Even if your phone really has no access to anything that you wouldn't want leaked (although most people would object to a third party having access to their phone calls, text messages, and location data), a compromised device is still a great way to launch attacks on other devices including taking part in botnets. None of this is an objection to old devices, mind; I'm a big proponent of running new software on old hardware, but the security patches are important.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by meristohm on Saturday October 14, 2023 @02:06PM (#37882729)
Same here. I've benefited from hand me down devices for a long time, and I wish I could still be using the Samsung S3- so light, I have several spare batteries, it fit in most pockets, and it has a 3.5mm headphone jack. The iPhone SE from 2015 that recently I gave to one of my parents was nice, too.

My laptop is also from more than a decade ago, and I'm happily running LMDE 6 on it.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by Brian_K_White on Saturday October 14, 2023 @06:38PM (#37884897)
This is all correct and valid.

Everyone doesn't have to live like this, but it's utterly valid, and no one has any right or justification to try to tell anyone else not to.

I can buy anything any time, but I miss swappable batteries, headphone jack, sd card. These were all basic utility features than made a device interoperable and more generally functional. Removing them only benefits the people selling new phones, wireless headphones, and cloud storage.

My old vaio 3 laptops ago is actually still perfectly fast enough at what I do today, it just only has usb2 ports, which eventually became too big of a pain point. But it also had a real docking station that you plop the machine into, not the stupid "docks" we have today that are not docks but just mega-dongle-hubs where you connect a usbc cable. I miss that dock every day since 5 years ago. I could easily still be using it today even though it must be 15 years old or more by now. And if I were, no one else would have any justification for trying to say that I shouldn't, and no software or service provider would have any justification for artificially creating some incompatibility that only serves their goals instead of mine.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by nicoco on Saturday October 14, 2023 @02:48PM (#37883111)
Oh yes, more e-waste, more consumerism. We don't have enough of those. Sending text messages and viewing images requires a 90's supercomputer. It's fine.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by creatonez on Saturday October 14, 2023 @06:26PM (#37884812)
Moto G4 was released in 2016, only 7 years ago.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by hexagonwin on Saturday October 14, 2023 @01:35PM (#37882467)
Maybe you can try getting DivestOS running. They only have 14.1 (Android 7.1.2) but unlike old LineageOS builds they patch security vulnerabilities and include some hardening.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by heavyset_go on Saturday October 14, 2023 @04:33PM (#37884026)
You can build it yourself, although it's a pain in the ass.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by wkat4242 on Saturday October 14, 2023 @05:31PM (#37884445)
Yeah I love MicroG. But I really wish there was a big-tech-free payment solution :(
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by notpushkin on Sunday October 15, 2023 @05:56AM (#37888438)
Yeah. It's either that or state-supported systems (UPS in India, SBP and MirPay in Russia). Cryptocurrencies could be the answer but governments would never let that happen I think.
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by neilv on Saturday October 14, 2023 @10:00AM (#37880529)
Even in the US, the limited hardware support is a barrier right now, especially with having to find a unit that has an unblockable bootloader.

But it's still doable for many people. I most recently bought a second-hand Pixel 6a for GrapheneOS, and BYOD it to an inexpensive no-contract plan.

Pixel 6a units with unlockable bootloaders are currently $235+ on US eBay, which is less than new current Pixels and iPhones bought outright, but more than many lower-end devices, and more upfront than people pay for contract plans that toss in a phone.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by milosmns on Saturday October 14, 2023 @11:19AM (#37881162)
Can you share some examples?

It's very interesting because 1/4 of Pixel 6a would be around 80 EUR... so I wonder about your environment and what workarounds you have for these problems.

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by blameitonme on Saturday October 14, 2023 @02:19PM (#37882855)
So I'm in India, and pixel 6a seems to be of 30999 Rupees on Flipkart (amazon like online store)

The device I use regularly is moto g14 which is at about 8500 online, with discounts can go for 8000.

Honestly there is no work around as the moto g14 comes with a 4gb ram and 128 GB internal storage, 6.5 inch screen and 5k mah battery, it can do pretty much anything.

I've just started working full-time after college and now I earn more than enough to buy pixels or iphones but currently the money is going on other important things that were pending

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by callalex on Saturday October 14, 2023 @02:36PM (#37883019)
Aren’t those kind of phones typically infested with malware from the manufacturer to begin with, making Google’s stalking the least of your worries?
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by diego_sandoval on Saturday October 14, 2023 @08:59PM (#37885793)
I got lucky and bought a barely used Pixel 3a for ~ $130 USD. But yes, it was hard to find.

It was much easier to find a Pixel 4 or a 4a, but those were too expensive for me.