fa
AWAGMI?
fae88c1d3b0d83d2ab6b08588271f189b854452527b89a7f0106480abcadbeb2
Replying to Avatar Ava

###### **Your Cheat Sheet to Installing Android Apps the Privacy Respecting Way: From Direct Sources to Google Play Store**

**1. Direct from Developer**

- Get APKs directly from GitHub, GitLab, or Codeberg etc. using Obtanium

- If the app is on Accrescent, use Accrescent

**2. F-Droid**

Use only in these cases:

- When it's the developer's chosen release channel

- When no other distribution option exists

Most devs will put F-Droid instructions or a download button on their Git page or website. Use the developer's official F-Droid release repository or recommended repository whenever available (eg: many devs use IzzyOnDroid F-Droid repo for their releases instead of creating their own).

**When using F-Droid:**

- Use the official "**F-Droid Basic**" client

- Benefits: Automatic background updates without privileged extension or root

- Enhanced security through reduced feature set and attack surface

- Do not use alternative clients like Neo Store

**3. Google Play Store**

Use only if the app is unavailable through any other official channel.

Some prefer to use Aurora Store (a Google Play Store client which does not require a Google account, Google Play Services, or microG to download apps).

This is threat model and usecase dependent.

I prefer to just use Google Play since I have it installed on GrapheneOS where I use some paid apps not available anywhere else, and I want to keep all of my apps all in one place.

(Optional) Create an anonymous Gmail account and use it for Google Play.

---

*Note: This approach aligns with PrivacyGuides and GrapheneOS recommendations, as well as modern security standards. Third-party F-Droid clients are not recommended.*

```

#Ikitao #OPSEC #Privacy #Android #GrapheneOS

why would you trust the developer to provide untampered binaries/releases? with f-droid you'll either get reproducible builds or the binaries are built by a party who's main job is providing untampered builds (not a priority for app developers). i see it similarly to trusting a VPN with your traffic vs trusting an ISP with your traffic. if there is something i am missing please educate me.

Number 1 reason I refuse to use #NVIDIA on the desktop is that #Wayland support on #NVIDIA is still a hassle.

Most of the things work but something simple as watching a full screen video in the browser is still painful.

in a way it's almost like insomnia is the constipation of the mind.

the more i see posts with the #grownostr tag the less i seem to understand what the tag is about.

i initially thought it was about growing plants, like gardening. i really feel like a boomer.

the real ones trash on monero and claim it's simply the lesser evil in an inevitable future cashless society. if you see people selling it as the secondcoming of jesus, avoid them.

if some company released a model with 10x higher costs per token (due to the sheer hardware requirements for inference) but if it made gpt4 look like gpt2, you bet many people would gladly pay the extra price.

well, it is not exactly OSS, but it's self-hostable and the weights are widely available. so hopefully that's good enough for you.

i recommend giving it a try even if it is not one of the officially supported languages.

awesome, would be fantastic to be able to track down number stations