From 6862251297c5a56bd78c21ec2d8d52afa9618f9c Mon Sep 17 00:00:00 2001 From: Tommy Date: Wed, 23 Feb 2022 06:16:01 +0000 Subject: [PATCH] Add information about F-Droid (#644) Signed-off-by: Daniel Gray --- .../android-fdroid/1_droid-ify.yml | 12 +++++ assets/img/android/droid-ify.png | Bin 0 -> 7250 bytes collections/_evergreen/android.md | 48 ++++++++++++++---- 3 files changed, 50 insertions(+), 10 deletions(-) create mode 100644 _data/operating-systems/android-fdroid/1_droid-ify.yml create mode 100644 assets/img/android/droid-ify.png diff --git a/_data/operating-systems/android-fdroid/1_droid-ify.yml b/_data/operating-systems/android-fdroid/1_droid-ify.yml new file mode 100644 index 00000000..43c613e2 --- /dev/null +++ b/_data/operating-systems/android-fdroid/1_droid-ify.yml @@ -0,0 +1,12 @@ +title: Droid-ify +type: Recommendation +logo: /assets/img/android/droid-ify.png +description: | + **Droid-ify** is a modern F-Droid client made with MaterialUI, forked from [Foxy Droid](https://github.com/kitsunyan/foxy-droid). + + Unlike the official F-Droid client, Droid-ify supports seamless updates on Android 12 and above without the need for a privileged extension. If your Android distribution is on Android 12 or above and does not include the [F-Droid privileged extension](https://f-droid.org/en/packages/org.fdroid.fdroid.privileged/), it is highly recommended that you use Droid-ify instead of the official client. +downloads: + - icon: fab fa-android + url: 'https://android.izzysoft.de/repo/apk/com.looker.droidify' + - icon: fab fa-github + url: 'https://github.com/Iamlooker/Droid-ify' \ No newline at end of file diff --git a/assets/img/android/droid-ify.png b/assets/img/android/droid-ify.png new file mode 100644 index 0000000000000000000000000000000000000000..962626dee0c46fd11f6f25950ec76164f4585238 GIT binary patch literal 7250 zcmZ`;XH-+q)4mA_gdS?>1SN>{Do78gpopOK7J8Fjq)3Diil9iZ(y@T_B2uKQ2uQKe zdk?*cKN6WCsgAVMdZYsYPXzz~7Xbh#Bo%HI0G>zyz`8X6C}aQt!YjM! zp%STq+*Vuj7I69BliyO5Owv$#X_@*00Nt1W3h29Mu{{8Air>A3HVB;9vJA?$_~sp= z1%})Z#KDnz+0@tC##XfWC&#q@b}+==yl?w_%sZM=;4Aqx?@cXS2Miv~$*rX|^?*xF zOC511-!3sCg5L;PFkDyK;<%z?e6YDGxnDvENmVtf@vqxo8Oxc@$=p6UZ&h_#>EGDd zs3@tZ_#|RScEeGn!|0HgiZOW;hM~VV!{9e(gCMqc^klzHgRP?nOdmn8E#i{NJV>vpJG zcw|>N)imth0I1Vljg14GbVRW|?=&d@TTy5B_*Z{CD0|hpOpxiJw*cIN4C0GhYL!9- zOBRkziq8D3zip81a%XI;+M^%F8`(wHlNIL04hO>>g);tOy8SNY8mV9&9{TPCseRZN z;8{#4qXLl(*~kd%WKsEppr=p_vqmWpH2`9YO$5(dUY1z$BB0}nSCzJKCjs$=`iju| z5wCv1FDXLOinj4kJTKY2Kk`1?Z>Q%-Ex)#_4d3F%>}Y+3rm#z#;xH$edYix401!^t z4iMmVE=cpGNfz?#y7c9@0I0Y%RzQ_h{II+*wzC);qejB!V!W2Pt?g?Woct z;l27N^QvT=F|0E_wp1FchLTpRF-mBDk*UeyNN0FYfBur^!8rSsw7Vw;@Y%2nrS=YDp7ClBn1vTL0qQ+F98tk0zP|g;=s@12KDHVI&qQvx(okRj8`{NS6C|U& z23!n{devri-i=GDJo$W9#JOUgHoPg5M@rCFZI#paszh(`wP=@P zG2GIjk1*H<(HM4%a9eAN?DpHKm?8g9NN1^Vm!G;aTAI0*iAzTT$GUQg&EzO~X`*_5&~hx6UZzdEv)IX`g3OCKQ|yJ07B-(;Zg zP1LU)gsRjQ6>XGvC^Clb;?Hh_3PZ4nyuh-H#MCJnjI>BKwoYPib*A?NY$-i1HM4YU z=aAotp>`+xoGA>9_^*Zx@(T!o4LiL!PW$3rLO3sx zF-m6Khj2dB>1z8q=;g$q3YF2)rMz1Cna3v6%-ch6;qhS=j{>x^B9d99hCon=Wr|50oyxFkcGDxzIBfDKrY)~_a zTOlFTaMO-wYo?!7cO!Dpfu|A%rUd75R?ag`e?B>TE?z`1*nDhcJ?{5B_Q$^V>^NT( zwO{6WXg0Qm-aBp%|BuO{l*0s`B73asADVh_tob=$@2R2j7HAKjl%xu$#2TfK^TLk1 zhCG#^UiK(K%>XUx2JIdE)K=Y5fH!|+eGtYlAWnH~UcAhOR#SL4WY)b> zsy|qpstG~7&s)j~nkqnocHXdJxKA^j1V(msdS?GF{gXZ;WNHRsS3oMlzN+!QJA_(k z`rU}W`>hh^{Gq}JT$dt^DS59vmqgbAxra!CCk&j+G&{F;$klOod%9V$^=|sKO%eYQ zJ#zkBVI_5==ezM+))kfxf>iuI&*R?LAy}E}G;v+=CGX7B{g8OXoyI@M;!^Q{|Lc6C zn){hijQSMM%g?oH`wOyMB7epl64oOeY2wIAOewX+>zF8tSzn>_}dk34d@XY+^qLi_f5%ujA#a8$5E?dckM z89Gv-Wsv14hHbyx(#*+Zl*$C=i|jYv*NKuhzZqb8ZVQjIpzy!8raV>77(1N3 z?x{}k9yjxa+z4>~g}d!l7>vkUxp+M|pwv!q;8~)~%*1-EpjH0lbQCol?ZN_1aIKg8 zEz`LoIKm6+5cgC2oExn#I(o-6O@HwJo%hZBer%Oox!*|?z!V+siVcqmx3D8SD0;q6 z4x=#)lReT*uEeIHm)NFYt6yygssAiI-s9LSuX#-t&^3~}dGS?vwo{fQS?WW{utG#D2^$lUz@DnA@;a2>OHIdw|(YLvT zv~^Vqz3yDK;Ar(l>Yj_U?rfsM3+|HKYxa&SsEPDHzJV_lB%m{bLu^` z*m^y-ojqJYaB%!PL!~gK3d^#6lDnpxe7+_YrXsF6;)GoZt5IPShXp#?zN*JfyPW;_ z>XSoeTaTJVvqyKnay--wQE2Uu-c^2NX{t7mnRUHeHb&#j|1WYUw(g&>9xDW^HQp@t ztKBu}pjmN6IJ%+Se*fKCQ0^6#FD>z$PiBxWJ7Kr;QTr5CW>|vsN@B{ zg~$6A?cs@C_~|rLp0Cd&&+m2&*2>PL94I<^i;9b>Ygs)Q++#kNjxjt*yPc3Rw4e5U z(l76P_SLiB&k~fW9}WyC>3NCgkli%G8S6(5Ht>EoQ;z)D)XtKxSZuY!K7?p0F;#-6h4mK1_#RT#S!iYX{^61>`k+}ADSdfKE~lGL=49A6WQb0tOLq+o8HhHwm7jL zv2QfJt-n{F|>Du%Pzf;)YeV?MA9wp9r!(L8iy9sTS2p~Vexb8qGKWfUzJ>(z4okItA2-5MvBWKL!xBU4-FOB{p z#qVwrjuv&!ePkh^9pey8rc(QlN2fugX|bC1HTS75YRLO3!z~0eTVG#)P~|p!@f=@e zdDJ_o8_Xrgl^0aC5bQGWYBZ2)?r@1w#~5&O4Xp>8cE>?G^sh->lrl z9ZP}-v^s+N@%iVbxO*$UWz>jS`#sPd)y=b#ZL!yTE(430Df!_IH~j%&k0SO1oVUEpVg+wW1sR3*S;Is3b(rrYOd=R=pf+&%Bkl9xEKq@Y~8P;N|- z`|vFMq`9AY&I)C;Px~RAgu&Fba2bhtRJ!FVy^RLyvtY|L3xGj)han(#d zbfNQK^2vKNH_TkE*bkwme0(zeR|&xr(>A#wcNnGU(|5Aj$k8lbJbF)0SA~Z#V^u?F zRyimf5XRYoY|3N5EQr)z*1V?)1?WP# z))(j{dp+yk*Swf>x2iF=ChcKM;`X_#^^-R`a|RHOxl5O?-2b##6}yJHM2@-ovp}#o zvmoBOf9j;&AAY=Fn7WC1OLYrX*)4V2HvD=iO{+LPn8`0ej>2%naL!sYIFI1=7Dw=v zNy>X>?-Z$1Xoc`M;FDs73(y`@(9`D3tJGd5-AUh2>>QV?C`_7ttaHfFK^Ob_$n+_{ zh@RHUZ5mtd2j)(^Qf-Uc|9ZCnef9S{!8+>eWs(dMP+TqaUud499Lo@pt2xY<%afUy25X(B;z4W$ zZjc#&*Olq);I;gvSJr~@YlQ|>;c0_*9*S$s6N1BjfACzhb-t!9LpJQks7KtI7`}xS z?lGKmrZ}mNowCj84mE)I()qh6ZWk||zUO+KfZ$%Y*VYC}ga*9qHS>KNL;bN=y))ep z(O&k9LA1wH)bU~>s^JqDPS@-VbynAca zOj|GO@Kv=B$WB&Am4eeKw*JXC1jhEt zS3n69U4`mXbkvI6EtPBy;3(wLu|s#V56rsclbBvSwN%2t)+=lCEta{EMkhGb>#cHc zuGh7l#~TZ}6AF#3SF`Iy@BIRsxIz+c1NDauR~y_Jou~K|(t!|J7}$CJ@!}D5uV$rh z{)<#g^~dX9cE(?jG6luwBnHCj=z>rZsn=U>*;xhKjCKL@sj5&=Bj->&@Lr}8SiGke#@Q~`!1#`aNH zKV|@{XFj=D==P&V1bI_))>hsVG-V0~!6<_CReM60^v*tCKqk+p5>6k9fmTguik93q zOu_}HoFP9Ef3%UfCNBc;Uph=mPKeipxL8)OsHuXYi-{Os5V2bhGpa^Rrh^{BQXF~~(fYLsGuG-A&xyPJ#QC>{30+b;qlTS)<({izFhM5_}_#%W+j9H4() zq4avdOl{i_*K_Z~gH>AoY>y5%x+KDj>K5Luhq1s@oA_mixpud!xEbOy0Im9Elsi4s z44%vnZ|;Z-3K28mw-J{FuU3=M=mt~c<~X<&zbU`g0NRN13i)%RKhDQFx4VzWy9RDx zlD=`9jnK;prUR`X(g7(xD$A|wIGAP^n2!yVat8=2URpMtxFY7>>*dOyVyq-={>ap_ zC`~C(nbk@XEDvUw?`Ag=)975DptNqQ2SP3qrI8@}4JylS5zHe{*%52I!_FE%VB)bX z&5*46TL*|=hPQ{(sR3w;+8bS#Q>%Xq2D}CaPp%}*_AP)#UHtYdc)l-`-T`PLM7V?W zF`x)R86K`p3GixHD2*DR*6n(}S0>qhM=?M#iC*%xEYrs(l;OW96EToQMGTN&|KH(v zp9+_$3G}4i0p2mRKVaYMyOeuU7gWK8IR#~f8_3v*%Yv4?avYW(yI$d>yy4_I1u*Wzr@}a483whV9lR!y9MX9-5jjn;xjim0aU6gm zxt82bJ)(o8b&=Vk&zkt)8wk^D8)5*3qT8g(xKI~v?&eisMUh+(K-w$5IQwiT)?zaK zy7zALQQWwi`LFDil?uJK5UXGiT%_iOECY)^6s;Zrn!;?PEXloYng}$E|G3hn6aX1I zjOI?0bs(z63n$&XjuVzMss|wGD{Qn6uA2d}va)Y*URiYDz$?#z5VI>FfUo|Jdh-Y` zVY%OBW_AXXU_J9#hZN^ephUkHU0@(`^6}%xcTCSEk;G~`mcmBJZnBxs6N#>iVv%US zuwv3k$pltOAVJj*rJA-q7~PCkX4N|JV{LCsH37baec)Wkz1;CEF#+)Hh?u48&$_c1 zQO#`=&|P~H(i|2rs4Y_gP9|h^@W=sBWLyQ9xEI&Uiu3Z}jcG1<3Z0Wt>~}JMC&6!_ zHw>2lnfgbQ&PW11GG=q(7q`-2>>g|Q4uH&KOAQ1T|6=(~>uCM*diiinX$@yTXJ9*S z)O%qMdQKJjN9zz#mh*b(vGFwCI(NPq9w8cY2hKJon*EmGD@po1BRpDo}wv^-4**( z%byTyjuy^RpHQ~i<1%XaI`rkfQpEn4dAYxgYM0HjJB#NP%zcQMKdLS-Jd!&xz$$bI zmlsGm@?2-WxHF0=BzLG^JD`$|{}}aqbDKxKlLpt}MbQf4vF){LM2$*T_1Z(2H3Dv{5pI%WOjr)|K54_&E(}dGc`T#y2^W-%XaCLD#(aoX0TJ z*4@3?P=&xS!+|KOHZl%Ojg7>r!$77r^W{hhM5B}a4ut%jh#y%Jy-BKV|CAC3mx&wR zHazLyq4$z2sXkG{zfa=(C_2j>0b25C(QwS7s&hp`xKmj8fg_yuBu3+RqLX>5+wVjK zpG`Z>dvqd9D+ysfY~2x^ZBb6KPD>7Tf7GL0{#eSqM?2B}If+X4qt3JEx!AZlsq4W47Cx{in`K zD)lx#T+g9F`Cy*h?bj&?vUxrYu=_9TykxYI#I34TzB)GJ9r`L$u#@&r8kZ0$M0Ue5O(AIZMo>YOOB-B=rrI4SZ1u* zFx?n5vkE;#@xFx~>Y_DC5ln}1&ajNA^F3ulTG%(~7*zduV^0NRjk<{~vGHpQh|?Iw zcRJQ`7+ADDX!8!bXAfeLr-vD5+=xy6RRMO}QB=?K+!&PNygMKLfWQjW? z*mxS7440z$y~vZWcj5dr^S$pioxm&?UH`G~8qXbN*<$E0*I}Qso`ui%?;?A0R_9VR zX7XlDj-Ke?cdt3lTARStBUS6iRmLT}Gs=?{b;&3kDJdptB`I1w+L*X9SfU{V5`Dtb z$==6KTJpSiKV^M%>G{E?Kmr5ybOPu5)X(syrbvM5O;j^k)KwVa`9i@UhofP}IEgL& zx@4JO^{Whao1#7hE&rwRjKCpa*ih&HDVLnzll;FM4LQist-@384pD)3rtjANSo6!X z!&t!uYx+adRVWkwLfgl*qp?!=e`(NM3!^$GV-))%>AXFV(US@f-`_@wNe07v2ZL)8ixz-WPg>NkFLT@np3mb>)JhFsHC$fD7|2 zn{1>cCCq~*V!yrPKy3^hG5-bnblVz{%S|_D-X3;9;z^JVvbPFiNCa`88{WiDLoAlb z%|RFT$m$C)Dh~8yUJ>#jk@4Zo+0M_mD4$pa;Dh$b>MtoG>3Y`(lBWkq_h~4<+a`YYHhvBY zc0LXy0Z2(mNs3BJiAqWuNXRHiNh?Un3QI^RNJyv|p~nA@gS)4_i(}CL?;uH?<3Ms? v|E~vqPe;E18y^QCARs`@#lzLt&c@3@%+tpyYg>tfWCYy3{oq!Gx;6fPF;0)e literal 0 HcmV?d00001 diff --git a/collections/_evergreen/android.md b/collections/_evergreen/android.md index fc268857..1f957d3c 100644 --- a/collections/_evergreen/android.md +++ b/collections/_evergreen/android.md @@ -84,9 +84,9 @@ As the components of the phone such as the processor and radio technologies rely Devices that have reached their end-of-life (EoL) and are no longer supported by the SoC manufacturer, cannot receive firmware updates from OEM vendors or after market Android distributors. This means that security issues with those devices will remain unfixed. -### Android versions +### Android Versions -It's also important to make sure that you're not using an [end-of-life](https://endoflife.date/android) version of Android. Newer versions of Android not only receive security updates for the operating system but also important privacy enhancing updates too. For example, [prior to Android 10](https://developer.android.com/about/versions/10/privacy/changes), any user apps with the [`READ_PHONE_STATE`](https://developer.android.com/reference/android/Manifest.permission#READ_PHONE_STATE) permission could access sensitive and unique serial numbers of your phone such as [IMEI](https://en.wikipedia.org/wiki/International_Mobile_Equipment_Identity), [MEID](https://en.wikipedia.org/wiki/Mobile_equipment_identifier), your SIM card's [IMSI](https://en.wikipedia.org/wiki/International_mobile_subscriber_identity), whereas now they must be system apps to do so. System apps are only shipped by the OEM or Android distribution. +It's important to not use an [end-of-life](https://endoflife.date/android) version of Android. Newer versions of Android not only receive security updates for the operating system but also important privacy enhancing updates too. For example, [prior to Android 10](https://developer.android.com/about/versions/10/privacy/changes), any user apps with the [`READ_PHONE_STATE`](https://developer.android.com/reference/android/Manifest.permission#READ_PHONE_STATE) permission could access sensitive and unique serial numbers of your phone such as [IMEI](https://en.wikipedia.org/wiki/International_Mobile_Equipment_Identity), [MEID](https://en.wikipedia.org/wiki/Mobile_equipment_identifier), your SIM card's [IMSI](https://en.wikipedia.org/wiki/International_mobile_subscriber_identity), whereas now they must be system apps to do so. System apps are only shipped by the OEM or Android distribution. ### Android Permissions @@ -110,18 +110,46 @@ Be very **careful** about buying second hand phones from online marketplaces. Al We have these general tips: -* If you're after a bargain on a Pixel device, we suggest buying an "**a**" model, just after the next flagship is released. Discounts are usually available because Google will be trying to clear their stock. -* Consider price beating options and specials offered at [brick and mortar](https://en.wikipedia.org/wiki/Brick_and_mortar) stores. -* Look at online community bargain sites in your country. These can alert you to good sales. -* The price per day for a device can be calculated as \\({\\text {EoL Date}-\\text{Current Date} \\over \\text{Cost}}\\). Google provides a [list](https://support.google.com/nexus/answer/4457705) of their supported devices. -* Do not buy devices that have reached or are near their end-of-life, additional firmware updates must be provided by the manufacturer. -* Do not buy preloaded LineageOS or /e/ OS phones or any Android phones without proper [verified boot](https://source.android.com/security/verifiedboot) support and firmware updates. These devices also have no way for you to check whether they've been tampered with. -* In short, if a device or Android distribution is not listed here, there is probably a good reason, so check our [discussions](https://github.com/privacyguides/privacyguides.org/discussions) page. +* If you're after a bargain on a Pixel device, we suggest buying an "**a**" model, just after the next flagship is released. Discounts are usually available because Google will be trying to clear their stock. +* Consider price beating options and specials offered at [brick and mortar](https://en.wikipedia.org/wiki/Brick_and_mortar) stores. +* Look at online community bargain sites in your country. These can alert you to good sales. +* The price per day for a device can be calculated as \\({\\text {EoL Date}-\\text{Current Date} \\over \\text{Cost}}\\). Google provides a [list](https://support.google.com/nexus/answer/4457705) of their supported devices. +* Do not buy devices that have reached or are near their end-of-life, additional firmware updates must be provided by the manufacturer. +* Do not buy preloaded LineageOS or /e/ OS phones or any Android phones without proper [verified boot](https://source.android.com/security/verifiedboot) support and firmware updates. These devices also have no way for you to check whether they've been tampered with. +* In short, if a device or Android distribution is not listed here, there is probably a good reason, so check our [discussions](https://github.com/privacyguides/privacyguides.org/discussions) page. The installation of GrapheneOS on a Pixel phone is easy with their [web installer](https://grapheneos.org/install/web). If you don't feel comfortable doing it yourself and are willing to spend a bit of extra money, check out the [NitroPhone](https://shop.nitrokey.com/shop) as they come preloaded with GrapheneOS from the reputable [Nitrokey](https://www.nitrokey.com/about) company. The GrapheneOS project is not currently affiliated with any vendor and cannot ensure the quality or security of their products. A [CalyxOS membership](https://calyxinstitute.org/membership/calyxos) also entitles you to a device preloaded with CalyxOS. +## F-Droid +F-Droid is often recommended as an alternative to Google Play, particularly in the privacy community. The option to add third party repositories and not be confined to Google's [walled garden](https://en.wikipedia.org/wiki/Closed_platform) have led to it's popularity. F-Droid additionally has [reproducible builds](https://f-droid.org/en/docs/Reproducible_Builds/) for some applications, and is dedicated to free and open source software. However, there are problems with the official F-Droid client, their quality control, and how they build, sign and deliver packages, outlined in this [post](https://wonderfall.dev/fdroid-issues/). + +### Recommended Client +The official F-Droid client targets a [low API level](https://wonderfall.dev/fdroid-issues/#3-low-target-api-level-sdk-for-client--apps) and does not utilize the [seamless updates](https://www.androidcentral.com/google-will-finally-bring-seamless-app-updates-alternative-app-stores-android-12) feature introduced in Android 12. Targetting lower API levels means that the F-Droid client cannot take advantage of the new improvements in the application sandboxes that comes with higher API levels. For automatic updates to work, the F-Droid client requires that the [Privileged Extension](https://f-droid.org/en/packages/org.fdroid.fdroid.privileged/) be included in the operating system, granting it more privileges than what a normal app would have, which is not great for security. + +To mitigate these problems, we recommend [Droidify](https://github.com/Iamlooker/Droid-ify) as it supports seamless updates on Android 12 and above without needing any special privileges and targets a higher API level. + +{% for item_hash in site.data.operating-systems.android-fdroid %} +{% assign item = item_hash[1] %} + +{% if item.type == "Recommendation" %} +{% include recommendation-card.html %} +{% endif %} + +{% endfor %} + +#### Where to get your applications + +Sometimes the official F-Droid repository may fall behind on updates. F-Droid maintainers reuse package ids while signing apps with their own keys, which is not ideal as it does give the F-Droid team ultimate trust. The Google Play version of some apps may contain unwanted telemetry or lack features that are available in the F-Droid version. The Google Play Store requires a Google account to login which is not great for privacy. The [Aurora Store](https://auroraoss.com/download/AuroraStore/) (a Google Play Store proxy) does not always work, though it does most of the time. + +We have these general tips: +* Check if the app developers have their own F-Droid repository first eg. [Bitwarden](https://bitwarden.com/), [Samourai Wallet](https://www.samouraiwallet.com/), or [Newpipe](https://newpipe.net/), have their own repositories with either less telemetry, additional features or faster updates. This is the ideal situation and you should be using these repositories if possible. +* Check if an app is available on the [IzzyOnDroid](https://apt.izzysoft.de/fdroid/) repository. The IzzyOnDroid repository pulls builds directly from GitHub and is the next best thing to the developers' own repositories. We recommend that you download the GitHub builds and install them manually first, then use IzzyOnDroid for any subsequent updates. This will ensure that the signature of the applications you get from IzzyOnDroid matches that of the developer and the packages have not been tampered with. +* Check if there are any differences between the F-Droid version and the Google Play Store version. Some applications like [IVPN](https://www.ivpn.net/) do not include certain features (eg [AntiTracker](https://www.ivpn.net/knowledgebase/general/antitracker-faq/)) in their Google Play Store build out of fear of censorship by Google. + +Evaluate whether the additional features in the F-Droid build is worth the slower updates or whether faster updates from the Google Play is worth the potential privacy issues in your [threat model](/threat-modeling/). + ## Security comparison of GrapheneOS and CalyxOS ### Profiles @@ -152,7 +180,7 @@ MicroG is a reimplementation of Google Play Services. This means it needs to be Android 12 comes with special support for seamless app updates with [third party app stores](https://android-developers.googleblog.com/2020/09/listening-to-developer-feedback-to.html). The popular Free and Open Source Software (FOSS) repository [F-Droid](https://f-droid.org) doesn't implement this feature and requires a [privileged extension](https://f-droid.org/en/packages/org.fdroid.fdroid.privileged) to be included with the Android distribution in order to have unattended app installation. -GrapheneOS doesn't compromise on security, therefore they do not include the F-Droid extension therefore, users have to confirm all updates manually if they want to use F-Droid. GrapheneOS officially recommends [Sandboxed Play Services](https://grapheneos.org/usage#sandboxed-play-services) instead. Many FOSS Android apps are also in Google Play but sometimes they are not (like [NewPipe]({% link _evergreen/video-streaming.md %})). +GrapheneOS doesn't compromise on security, therefore they do not include the F-Droid extension therefore, users have to confirm all updates manually if they want to use F-Droid. Alternatively, they can use the Droidify client which does support seamless app updates in Android 12. GrapheneOS officially recommends [Sandboxed Play Services](https://grapheneos.org/usage#sandboxed-play-services) instead. Many FOSS Android apps are also in Google Play but sometimes they are not (like [NewPipe]({% link _evergreen/video-streaming.md %})). CalyxOS includes the [privileged extension](https://f-droid.org/en/packages/org.fdroid.fdroid.privileged), which may lower device security. Seamless app updates should be possible with [Aurora Store](https://auroraoss.com) in Android 12.