Replies (54)

Downloaded it cuz of this post, signed in and now writing this comment.
It would be interesting if Tapbots, makers of Ivory for Mastodon and Tweetbot for Twitter, got into the Nostr client business. They have the best app polish. 💅
.'s avatar
. 1 year ago
Yeah I checked on that too as I saw someone saying they thought Ykihonne was closed?
Bro, I know you personally, and you backing Francis is the biggest joke ever. You have no idea how people act behind your back or even how they treat their loved ones on a daily basis. (He treats his girlfriend and daughter horribly.) This Francis from BB is the biggest scam ever. You’re supporting the wrong people. 👀 Open your eyes and see the truth.
i have not tried the app myself, i use amethyst, too.. i just think obtainium and zapstore made fdroid obsolete
JackTheMimic's avatar
JackTheMimic 1 year ago
It is FOSS but it doesn't have a release iteration.
JackTheMimic's avatar
JackTheMimic 1 year ago
You can read all the code but there's no way to know if that's what is on the downloaded build.
Valid point. At the moment, it’s Web of Trust via @Zapstore. The listing does read “source code not available”. 🧐 I saw an app named Obtainium that claims to let you “get Android app updates straight from the source“.
JackTheMimic's avatar
JackTheMimic 1 year ago
They both pull code from Git sources. Obtainium will say "Could not find a suitable release." This means the project has not pushed the build even if all the code is readable on Git.
Just grabbed the app. Works great. Nice to see how easy it is to add the key to my account.
What is the rationale for preferring F-Droid, if I may ask? It is a third party, whereas via the web you are trusting our domain name and server. You can verify certificate and blob hash if you want to be 100% sure. Yes, we want to put Zapstore on F-Droid. But we do not want F-Droid to build a non-reproduceable APK, that would be regarded. When we get to reproduceable builds, we then will go through the F-Droid bureaucracy, no problem.
Verifying the blob hash is an extra step, and I don't know how, on my phone at least. Fdroid does all that stuff for you. That's why people like it.
I know, but the fewer sources you trust the better. This is just a suggestion. I think you'll get more downloads if you're on fdroid. And even more if you're on Google Play store. It's up to you.
Absolutely, I agree with you. However F-Droid is a tricky one. They build AND host packages themselves, and they had security issues. Way too much trust placed in them. The only way that makes sense to use F-Droid is with reproduceable builds.