Just found: gopher://tilde.pink/1/~bencollver/dir Nice app for directions on gopher.

jellyfin is also a good alternative with free apps for your phone.

Need to share something with your smart phone?

qrcode "$(pbpaste)" | open -a Preview.app -f

How Google Authenticator made one company’s network breach much, much worse | Ars Technica

🤦‍♂

WHY are these big companies treated as though they are the be all and end all of infosec? These are rookie mistakes Google’s making, at scale.

Unfortunately Google employs dark patterns to convince you to sync your MFA codes to the cloud, and our employee had indeed activated this “feature”. If you install Google Authenticator from the app store directly, and follow the suggested instructions, your MFA codes are by default saved to the cloud. If you want to disable it, there isn’t a clear way to “disable syncing to the cloud”, instead there is just a “unlink Google account” option.

Like, never ever put your multi-factor tokens into a single cloud storage location! The whole point of this being “multi” factor is that there is a separate, independent physical factor involved in the authentication process. If the authenticator app on your phone puts the tokens in the cloud, then it reduces the security that comes from having a second factor. This is basic stuff.

Of course, never ever use Google Authenticator. All it does is generate TOTP and HOTP codes, which you can do with any OTP app, preferably an open source one that’s been vetted.

@prologic@twtxt.net I use the gmail webapp for work, and I have to say that over the years it’s gotten less and less usable. There are so many little usability things that it’s bad at. For instance, if you select a message and hit the Delete key nothing happens. The message is not put in the trash like you’d expect. There are issues like that scattered all over the app. I suspect they spend most of their energy on the spyware side of gmail and dedicate less to making it a useful app for end users (which seems to be true of their search engine too).

@adi@twtxt.net I think it is, and one benefit they have is that you can add third-party repositories to the F-Droid app as you discover them. So, for instance, if you know of a developer who pushes builds to an F-Droid compatible repository, you can add that to your F-Droid app and start tracking updates like you would for any other app in there. Can’t do that with Google Play!

F-Droid tends to focus on open source applications that can be built in a reproducible way, which limits the inventory (though of course tends to mean the apps are safer and don’t spy on you). There are non-free apps in there as well but they come with warnings so you’re informed about what you might be sacrificing by using them.

That said if you have a favorite app you get through Google Play, there’s a decent chance it won’t be in F-Droid. Many “big corporate” apps aren’t, and vendor-specific apps tend not to be either. But for most of the major functions you might want, like email clients, calendar apps, weather apps, etc etc, there are very good substitutes now in F-Droid. You’re definitely making a trade-off though.

What I did was go through the apps I had installed on my last phone, found as many substitutes in F-Droid as I could, started using those instead to see how they worked, and bit by bit replaced as much as I could from Google Play with a comparable app from F-Droid. I still have a few apps (mostly vendor-specific things that don’t have substitutes) that come from Google Play but I’m aiming to be rid of those before I need to replace this phone.

@adi@twtxt.net @prologic@twtxt.net F-droid. Getting APKs from developers you trust and side-loading them. Some flavor of Linux. Some distro of the open source parts of Android.

There are lots of options. Bit by bit I divest from anything that’s distributed from Google Play. With my latest phone I find and download APKs so that I could have the app without all the Google crap woven through it. By the time I need to replace this one I’ll be fully free of Google Play. Most of my apps come from F-droid now. You can a perfectly functional phone/pocket computer unless you’re addicted to installing dozens of corporate apps.

@adi@twtxt.net @prologic@twtxt.net It’s worth bearing in mind that

• Fairphone has taken a considerable amount of VC funding so, sooner or later, that bill will become due: (see: https://techcrunch.com/2023/01/31/fairphone-growth-capital-raise and https://www.crunchbase.com/organization/fairphone)
  
• Fairphone comes with Google Play apps by default, so it’s also a spyware vector (see: https://mastodon.ar.al/@aral/110978014080809471)
  

I used to have a lot of hope for them but these two ingredients mean that enshittification is virtually inevitable.

[FastLyrics] una app FOSS que me ha sorprendid por su desempeño, las letras ok.

[FastLyrics] una app FOSS que me ha sorprendid por su desempeño, las letras ok.

@jmjl@tilde.green I’m sorry that I’m not super knowledgeable about alternatives to jmp.chat but I’ll tell you what I know.

You’re probably right about jmp.chat not working for you, at least as it is now. You can only get US and Canadian phone numbers through it last time I checked, so if you’re not in either of those countries you’d be making international calls all the time and people who wanted to call you would be making international calls too.

I’ve seen people talk about using SIP as an intermediary: you can bridge SIP-to-XMPP, and bridge SIP-to-PSTN (PSTN = “packet switched telephone network”, meaning normal telephone). You can skip the SIP-to-XMPP side if you’re comfortable using a SIP client. I don’t know very much about SIP or PSTN so I am not sure what to recommend, but perhaps this helps your search queries.

There are a fair number of services like TextNow that let you sign up for a real telephone number that you can then use via their app (I wouldn’t use TextNow–they had tons of spyware in their app). I don’t know if that kind of service works for you but if it does perhaps you’d be able to find one of them that isn’t horrible. This page (https://alternativeto.net/software/jmp-chat/) has a bunch of alternatives; I can’t vouch for any of them but maybe it’s a starting point if you want to go this route.

Good luck!

@mckinley@twtxt.net Yes, I’m still with jmp.chat, and still very happy with them overall. Their beta period ended and their pricing increased a bit, so that’s worth a bit of consideration. I also managed to get one of their eSIMs. I’m slightly less happy with that aspect of their service, though they seem to be actively working on improving it and I knew in advance this was an early beta kind of thing and likely to have issues.

The only unreliability with calls that I’ve noticed was traceable to the unreliability of my own internet connection. I’ve confused incoming calls by simultaneously making and taking calls from the computer and the phone, but I think it’s understandable that problems might arise and that’s not a real use case for me. Once or twice I did not receive a text transcription of a voice mail, but the support is usually quick to address things like that.

I host my own XMPP server and have for a good decade now, and that’s what I use with jmp.chat. I can’t speak to the quality of their hosting options.

Group texting works fine for me if one of the other parties initiates the group text. I haven’t tried to initiate my own group text in well over a year; last time I did, it didn’t work. That may or may not be a problem for you, and it may or may not have been fixed by now. Worth investigating more if it’s important. I should also say I’ve only ever used group texts with 3 participants, and can’t speak to what happens if there are more nor whether there are upper limits.

Group texts don’t use MUC. Rather, they use a special syntax in the JID, something like “+1XXX,+1YYY,…,+1ZZZ@cheogram.com”, where the + and , are required, the XXX, YYY, through ZZZ are the phone numbers (no dashes or other special chars just digits), and the @cheogram.com at the end is required.

I recommend the cheogram app if you’re on android. It has a lot of nice features on top of the Conversations base. I use gajim on my (linux) computer and it works well with jmp.chat.

I’m happy to answer other questions if you have them!

More easily build/run little LÖVE apps on Android: 1) https://love2d.org from app store 2) https://love2d.org/forums/viewtopic.php?t=94852

Quickly make any app hackable – as long as it’s built in LÖVE. https://forum.malleable.systems/t/adding-malleability-to-any-love-app/90

Not a bad option, although now we need a phone with camera, a printer, a QR reader app, to name a few…
And don’t let get started with usability issues of QR codes (like restaurant menus)

My idea is to make it easy to backup keys with pen and paper 🖋 📄 without copying the hexadecimal string which is prone to error 👀

@prologic@twtxt.net aha, thank you, that got me unjammed.

Turns out I thought I had an SSH key set up in github, but github didn’t agree with me. So, I re-added the key.

I also had to modify the command slightly to:

ssh -p 2222 -i PRIVATE_GITHUB_KEY GITHUB_USERNAME@cas.run help

since I generate app-specific keypairs and need to specify that for ssh and I haven’t configured it to magically choose the key so I have to specify it in the command line.

Anyhow, that did it. Thanks!

I’m using rss on a terminal (Termux) in my phone, it’s more confortable read there articles and other stuff, but for posting on twtxt, I tried , I swear it, but it’s too much, it’s not practical, I have to assume that it’s better in a website/app like this.

Yarn wins!

[Geddit] una buena app para leer Reddit que no utiliza las API del servicio 👌.

[Geddit] una buena app para leer Reddit que no utiliza las API del servicio 👌.

https://app.keeweb.info tiene la habilidad de cargar bases de datos de KeePass.

https://app.keeweb.info tiene la habilidad de cargar bases de datos de KeePass.

🤔

An app can be a home-cooked meal
https://www.robinsloan.com/notes/home-cooked-app/

[Tasky] una simple app para tareas diarias, puedes encontrarla en F-droid.

[Tasky] una simple app para tareas diarias, puedes encontrarla en F-droid.

@prologic@twtxt.net bummer, that’s a shame. I ask because I install the vast majority of my phone apps from f-droid these days, and only use Google Play Store when I have no other option. I know the Play Store will have more reach, but I’m guessing reach isn’t the highest priority right now.

Hands-on with my Freewheeling Apps: https://youtu.be/aD6vmbmzdBo

(demo; 20 minutes)

@prologic@twtxt.net is goryon not in the google app store?

[Windy] es una excelente app para estar atento con la situación meteorológica 🥸.

[Windy] es una excelente app para estar atento con la situación meteorológica 🥸.

“if you can find a way to solve a real problem effectively enough so that a billion people or more would want to use it twice a day you are bound to make a lot of money. much more money than if you were to build the next photo sharing app.” - mo gawdat

Detesto tener que usar apps privativas para editar imágenes en android, kcuf.

Detesto tener que usar apps privativas para editar imágenes en android, kcuf.

https://remotestorage.io/apps otra propuesta interesante.

https://remotestorage.io/apps otra propuesta interesante.

A little app for drawing graphs: https://git.sr.ht/~akkartik/snap.love

@prologic@twtxt.net I always liked bit.
I am disappointed that a GUI app would not at least have screenshots.

https://strykerdefence.com parece una interesante app de pentesting, es de pago.

https://strykerdefence.com parece una interesante app de pentesting, es de pago.

[ru.tech.imageresizeshrinker] excelente app para manipular el tamaño de imágenes.

[ru.tech.imageresizeshrinker] excelente app para manipular el tamaño de imágenes.

@eldersnake@we.loveprivacy.club apparently someone that generates graphql endpoints for a biiiig app

[RadioDroid] y [Audials Play] son las mejores apps para escuchar la radio online.

[RadioDroid] y [Audials Play] son las mejores apps para escuchar la radio online.

[p!n] excelente app para los olvidadizos, deja una nota en tus notificaciones.

[p!n] excelente app para los olvidadizos, deja una nota en tus notificaciones.

Like, check it out. That link to DRY? It doesn’t render as a link in the webapp. However, it does render as a link, and works fine, in Goryon. I’ve seen before that Markdown tables render fine in Goryon but not in the webapp. They ought to behave as similarly as possible, right? So just in this small interaction there are three discrepancies between how the mobile app and webapp render Markdown.

https://play.google.com/store/apps/details?id=com.keydecoder - KeyDecoder

https://play.google.com/store/apps/details?id=com.keydecoder - KeyDecoder

@abucci@anthony.buc.ci So.. The issue is that its showing the password by default? Would making an alias to always include the -c help? We can probably engage Jason with a PR to enable a more hardened approach when desired. I’ve spoken to him before and is generally a pretty open to ideas.

I found this app that was created by the gopass author that does copy by default and has a tui or GUI mode https://github.com/cortex/ripasso

Bluetooth Domino https://play.google.com/store/apps/details?id=ratmil.domino