pylapp

joined 2 years ago
MODERATOR OF
 

About enshitification of web dev.

 

If companies with commercial uses supported open source project by funding or contributing, things could have been better.

 

If companies with commercial uses supported open source project by funding or contributing, things could have been better.

 

A highly configurable and performant tool for obfuscating Swift literals embedded in the application code that you should protect from static code analysis, making the app more resistant to reverse engineering.

Simply integrate the tool with your Swift package or Xcode project, configure your own obfuscation algorithm along with the list of secret literals, and build the project 🚀

Swift Confidential can save you a lot of time, especially if you are developing an iOS app and seeking to meet OWASP MASVS-RESILIENCE requirements.

 

A highly configurable and performant tool for obfuscating Swift literals embedded in the application code that you should protect from static code analysis, making the app more resistant to reverse engineering.

Simply integrate the tool with your Swift package or Xcode project, configure your own obfuscation algorithm along with the list of secret literals, and build the project 🚀

Swift Confidential can save you a lot of time, especially if you are developing an iOS app and seeking to meet OWASP MASVS-RESILIENCE requirements.

 

Some tips and best practices to test a11y of Android apps

[–] pylapp@programming.dev 2 points 3 months ago

It is always the same issues in fact. You should consider your threat model before all. Then, consider the Signal app, then your iPhone supposed to be updated, trusted, with ADP enabled, biometric lock with erasure after 10 failures, etc. Then consider your ISP, then your country. Etc, etc. You should also compare the contexts. Is an iPhone “better” than a low or middle ranges Android-powered smartphones? For sure, yes. Is it better than high-range expansive smartphones with Android ? Or Pixel ones? Not that sure. And compared to GrapheneOS or /e/? Pretty sure not that much. You can also compare messaging solutions. Is Signal better than WhatApp? Of course yes. But what about XMPP and Matrix for example?

And what are your use cases? Remember your threat model. If you are an activist, a journalist or a whistleblower your needs may be different than a “commons citizen worried about its privacy.

In few words, the only pain point I see is the fact than iOS is proprietary and runs non libre source code and Apple devices than APN. But Android devices are not so much different. It does not mean the solution is not private or efficient, if we succeed in defining a definition of “private or efficient”.

In a nutshell, it could be considered as good. But not perfect.

[–] pylapp@programming.dev 6 points 5 months ago (7 children)

Any ideas for E2E encrypted storage alternatives?

[–] pylapp@programming.dev 3 points 6 months ago

Not sure of that, maybe we need some case law or update on existing copyleft licenses. Source code generated with GenAI tool, even if their model have been trained with corpora of copyleft sources, are not (yet) considered as derivative works. What a pitty.

[–] pylapp@programming.dev 3 points 6 months ago

Could be interesting. Non-free and current GenAI tools violate copyright, we may consider some evolutions of copyfarleft licenses to forbid such use of source code in these types of tools.

[–] pylapp@programming.dev 4 points 6 months ago (2 children)

Just wanted to share for the common knowledge and the debate as I already saw here some “post open source” and content about rubbish licenses like SSPL or BSL 😉

[–] pylapp@programming.dev 2 points 6 months ago

Enshitification made third-party apps disappeared. Prefer true open source project instead like Pixelfed for example.

[–] pylapp@programming.dev 7 points 7 months ago (1 children)

Be sure also the issues you have in your project have the suitable labels to help future contributors to pick easily some of them, i.e. labels like “help wanted” or “good first issue”.

You can also refer to best practices listed and explained for example in Advent of Open Source so as to have a nice and user-friendly repo: https://adventofopensource.com/

[–] pylapp@programming.dev 8 points 8 months ago (1 children)

Have a look on Organic Maps (https://organicmaps.app) or OSMAnd for example (https://osmand.net/).

[–] pylapp@programming.dev 1 points 9 months ago (2 children)

BTW I hope any project won’t increase the Z version only by including Dependabot commits, it would be insane. Release must be documented, tested, with CHANGELOG updated. If some maintainers just accept Dependabot commits without checking, move away. That’s just simple crappy auto-merge.

[–] pylapp@programming.dev 2 points 9 months ago

Nice idea 👍

view more: ‹ prev next ›