[–] 4 points 6 months ago

Signal is only available on F-Droid via an unofficial build from the Guardian Project. The maintainers of the Guardian Project lag behind on updates for their repos, so their repository should not be used for any apps important for security.

  • source
  • parent
  • context
  • [–] 2 points 6 months ago*

    This depends whether you care about security or software freedom guarantees. Because if it's security that is the priority, F-Droid is a much weaker option than Obtanium+Appverifier because they use their own signing keys for nearly all apps. If F-Droid's build infrastructure is ever compromised, then almost every app you have downloaded through it is also compromised. The inability for developers to control their own signatures is part of the reason Signal does not release on F-Droid.

    Accrescent is a much better option than anything else because it still allows developer-managed keys, although it doesn't have many apps. Google Play (although it does have high-security infrastructure) has the same problem as F-Droid of centrally managed keys. Obtanium with Appverifier at least lets you ensure that your app is signed by the developer.

  • source
  • parent
  • context
  • [–] 2 points 7 months ago

    That markup work to try to hide what's on your laptop doesn't work, and someone can easily see what's on your screen from this photo. You should use an actual box or do what you did with the emoji to cover sensitive info.

  • source
  • [–] 6 points 7 months ago*

    Now, EPFL researchers... have released new software that allows users to download open-source AI models and use them locally, with no need for the cloud to answer questions or complete tasks.

    It's cool that they got LLMs running on local clusters of computers, but with the way it's written, they make it sound like people have not already been using local LLMs for a long time (including GPT-OSS 120B).

  • source
  •  

    I don't know if it's just me, but it feeks like there's been more spam posts than usual on Lemmy this October. Especially in instances like lemmy.world, lemdro.id, and others.

    For example, this week, there has been a 3-day-old account on lemmy.world with over 480 posts. I also refreshed my feed today to find a <1 day old account from lemy.lol just posting Perplexity affiliate links to various places. I've blocked like 10 accounts in the past week alone for this reason.

    With affiliate links I kind of understand the motivation. However, for non-promotional spam, upvotes on Lemmy aren't valuable in the same way that it is on Reddit, and there's no real value to an account with a lot of karma.

    Is it just me that's noticed this increase? Does anyone know why this might be happening just now?

    view more: next ›