BustaFeb 26
Yves Jeanrenaud

I made an app.
https://play.google.com/store/apps/details?id=ch.pocketpc.nearbyglasses
Nearby Glasses is here to warn you when smart glasses are nearby.

I hope it's useful for someone.

The app is now open source (AGPL-3.0), the app is free and rather simple
https://github.com/yjeanrenaud/yj_nearbyglasses

It's also downloadable outside the Play Store. iOS port is in the making. F-Droid is an option, will have to look into that

Feb 23 at 9:44pmWeb
Show threadSteffi the RedheadFeb 24
@yjeanrenaud new spyware dropped 😁
Show threadFredricT πŸ˜·πŸ’‰πŸŒ»πŸŒˆFeb 24
@fuchsi @yjeanrenaud What do you mean by "new spyware"? πŸ€”
Show threadWendroid πŸ‡ΊπŸ‡¦Feb 24
@FredricT @fuchsi @yjeanrenaud Cunty reply by someone who thinks surveillance glasses are cool?
Show threadSteffi the RedheadFeb 25
@wendinoakland @FredricT @yjeanrenaud that you would need such an app as a spy.
Counter-intelligence?
Show threadChris Routh (He/Him)Feb 25

@fuchsi @wendinoakland @FredricT @yjeanrenaud

Meta glasses are the spyware.

This is the adblocker.

Show threadAlysFeb 25

@wendinoakland
@yama
@FredricT

It was just a misunderstanding of the meaning of the word "spyware". There's new toots in the thread that clarify. :)

Show threadWendroid πŸ‡ΊπŸ‡¦Feb 25
@lady_alys @yama @FredricT finally
Show threadMayaFeb 24
@fuchsi @yjeanrenaud oh great. another fedi dipsh!t to insta-block 🀣
Show threadAlysFeb 24

@fuchsi

Smart glasses could be described as spyware (recording images and audio without your knowlege or consent).

This app isn't spyware. It's using information that is already available to your phone (Bluetooth IDs that other devices are already sending out on their own accord) and merely making it easier for you to be aware of that information.

@yjeanrenaud

Show threadSteffi the RedheadFeb 25

@lady_alys @yjeanrenaud oh, my bad. I guess I should have written anti-spyware then.

I thought it would be something essential for a spy to be aware of people with spy glasses. I believe Counter- intelligence is the word for that?

Show threadAlysFeb 25

@fuchsi

Ah yes! That's the term for it. :)

@yjeanrenaud

Show threadSteffi the RedheadFeb 25

@lady_alys @yjeanrenaud thanks for correcting me.

Apparently that wording was enough to insult and block me.

Show threadYves JeanrenaudFeb 25
@fuchsi @lady_alys I took no offence. Honestly, I was not sure where this is heading towards, either. Sorry people called you out
Show threadAlysFeb 25
@fuchsi
πŸ’› They misunderstood your intention and overreacted badly. 😞
Show threadelle mundyFeb 25
@lady_alys @fuchsi @yjeanrenaud spywear
Show threadNuwagaba GiftFeb 24
@yjeanrenaud
Thanks for the great work. I'll download it and share it with my friends because it's problem solving. Have you made any other apps yet?
Show threadPam CFeb 24
@yjeanrenaud Now we need an app to Jam them or make them stop working altogether.
Show threadFandaSinFeb 24

@Pamela1960

/sarcasm
That could be done by politly asking...and if that won't help, there's always a slap.πŸ˜‰

@yjeanrenaud

Show threadDec [{()}]Feb 24
@FandaSin @Pamela1960 @yjeanrenaud
A device like the HackRF or Flipper Zero might be able to send something interesting over wifi or Bluetooth.
Show threadYves JeanrenaudFeb 24
@dec23k @FandaSin @Pamela1960
flipper might even do the scanning trick beforehands, so there would be no need for that app
Show threadYves JeanrenaudFeb 24
@Pamela1960 well, one could analyse their wifi transmission of video data. But likely this will only stop long term recording on the go
Show threadWendroid πŸ‡ΊπŸ‡¦Feb 24
@Pamela1960 @yjeanrenaud Deflect/distort would be cool.
Show threadAsta McCarthyFeb 24
@Pamela1960 @yjeanrenaud That app is already there 
Show threadthe pirate babeFeb 25
@Pamela1960 @yjeanrenaud let's not forget that these devices could be very useful, maybe even life-changing for people with impaired sight, and possibly other disabilities too?
Show threadYves JeanrenaudFeb 25
@stine @Pamela1960 absolutely. I impose to people abusing it, for abusing people
Show threadMichael T BabcockFeb 28
@stine @Pamela1960 @yjeanrenaud some of us have had multiple concussions and dream of having devices that would just remind us what people's names are in public, and maybe when we last interacted. Sigh.
Show threadYves JeanrenaudFeb 28
@mikebabcock @stine @Pamela1960 maybe. But at what cost?
Show threadMichael T BabcockMar 4
@yjeanrenaud @stine @Pamela1960 there's no cost. You already have no expectation of privacy in public. You're on every dash camera driving by, red light cameras, security cameras, mostly connected to the Internet with very little security.
Show threadEnola KnezevicFeb 24
@yjeanrenaud Petition to rename it to "Nearby Glassholes"
Show threadEyeFeb 24

@rhelune @yjeanrenaud

I like this a lot!

Show threadYves JeanrenaudFeb 24
@grb090423 @rhelune
yeah, I can see that, but likely Google would punish me for that name
Show threadNature PunkFeb 24

@yjeanrenaud So simple but so effective :)

I've got a pair of Meta Quest 1 and a Meta Quest 3 in the house if you need fingerprinting from them to see if you can filter them out?

Show threadJustin 😸Feb 24
@naturepunk @yjeanrenaud I think if they can be picked out it’s a good thing, but theoretically they can load the same type of capture and recognition capabilities- so even though it should be obvious someone is using them, they could be disguised as something else if not worn by the user? Seems fine to keep detecting them.
Show threadFace ThumbFeb 24
@yjeanrenaud Awwww heck yeah! Nice work!
Show threadYves JeanrenaudFeb 24
@chrisp thanks!
Show threadYves JeanrenaudFeb 24
@chrisp thanks!
Show threadFazal MajidFeb 24
@yjeanrenaud now, we need someone to invent a portable EMP gun.
Show threadDec [{()}]Feb 24
@fazalmajid @yjeanrenaud
With a Flipper Zero compatible pinout.
Show threadGeraldo Feb 24
@yjeanrenaud cool! Please consider publishing it on the F-Droid store, too.
Show threadAsterisk πŸ‡¨πŸ‡¦Feb 24
@mosquete @yjeanrenaud Probably not the best idea given its security track record. Should be put on Accrescent though.
Show threadYves JeanrenaudFeb 24
@asterisk @mosquete I did consider f-droid and prepared a merge request. Accrescent is new to me, I will have to look into it
Show threadOlivierFeb 26

@yjeanrenaud instead of (or in addition to) F-Droid, I would consider @IzzyOnDroidOrg. The repository is compatible with the F-Droid clients.

@asterisk @mosquete

Show threadIzzyFeb 26
@dacmot @yjeanrenaud @IzzyOnDroidOrg @asterisk @mosquete Quick pre-check looks good, we'd just need the metadata (in a fastlane tree). Be welcome to file an inclusion request with us, we'll guide you through the process then: https://codeberg.org/IzzyOnDroid/repodata/issues/new?template=.forgejo%2fissue_template%2fapp-inclusion-request.yaml
Sign in

Codeberg is a non-profit community-led organization that aims to help free and open source projects prosper by giving them a safe and friendly home.

Codeberg.org
Show threadYves JeanrenaudFeb 26
@IzzyOnDroid thank you! That's kind
Show threadIzzyFeb 27
@yjeanrenaud and welcome aboard – inclusion completed πŸ₯³ Please check the notes for some hints, though πŸ˜‰
Show threadYves JeanrenaudFeb 27
@IzzyOnDroid Thank you! I tried to address those issues, too
Show threadGilles MertensFeb 24
@asterisk @mosquete @yjeanrenaud hi, i am curious. Do you have links or information about fdroid security issues ?
Show threadAsterisk πŸ‡¨πŸ‡¦Feb 24

@gillesmertens @mosquete @yjeanrenaud

F-Droid stuff:

https://privsec.dev/posts/android/f-droid-security-issues/
https://xcancel.com/GrapheneOS/status/1883895255142932816
https://gitlab.com/ironfox-oss/lronFox/-/issues/7
https://github.com/obfusk/fdroid-fakesigner-poc https://github.com/CatimaLoyalty/Android/issues/2608 https://gitlab.com/fdroid/admin/-/issues/593
https://github.com/00-Evan/shattered-pixel-dungeon/issues/1394

F-Droid Security Issues

F-Droid is a popular alternative app repository for Android, especially known for its main repository dedicated to free and open-source software. F-Droid is often recommended among security and privacy enthusiasts, but how does it stack up against Play Store in practice? This write-up will attempt to emphasize major security issues with F-Droid that you should consider. Before we start, a few things to keep in mind: The main goal of this write-up was to inform users so they can make responsible choices, not to trash someone else’s work.

Show threadGilles MertensFeb 24
@asterisk
Interesting ! thank you :)
Show threadpixelschubsiFeb 26

@gillesmertens @asterisk
Some of these are rather opinionated takes. Don't let perfect be the enemy of good.

One of the takes is that F-Droid signs apps themselves. This is only true if reproducible builds don't work. As a developer you can have your app listed in F-Droid with your own signing key, by making it reproducible and providing a source for your own signed updates (so their server can take your signature from it rather than providing its own).

Show threadpixelschubsiFeb 26

@gillesmertens @asterisk
I'm not saying F-Droid has no bugs or flaws. All software has.

But it's also a known thing in the scene the F-Droid is receiving hate from "security experts" for very stupid cult mentality reasons. F-Droid is/was included in CalyxOS. GrapheneOS lead hates against CalyxOS and everything that is remotely related to it, so F-Droid is also a target. And the cult about GrapheneOS is following their lead.

Show threadAsterisk πŸ‡¨πŸ‡¦Feb 26
@pixelschubsi @gillesmertens The build VMs running extremely outdated versions of Debian, did they ever get around to fixing that?
Show threadF4GRX SébastienFeb 24
@mosquete @yjeanrenaud that would be nice, yes. having it in fdroid would guarantee it is both open source and without proprietary tracking services.
Show threadC++ Wage SlaveFeb 24

@f4grx

You can easily check for trackers. This app doesn't have any, and it has fewer permissions than most other apps, too:

https://reports.exodus-privacy.eu.org/en/reports/ch.pocketpc.nearbyglasses/latest/

@mosquete @yjeanrenaud

Report for ch.pocketpc.nearbyglasses 1.0.2

Known trackers, permissions and informations about this specific version of this application

Ξ΅xodus