mzajc

I trust mine not to brick my smartphone on purpose, at least. Especially not using methods that leave traces of what was done.

The exploit gives you access to a machine, not necessarily the one terminating TLS and keeping logs.

I only forced myself to read through this slop prose because I found the topic interesting, but I'd much rather be reading something that doesn't repeat itself constantly and sounds human.

> 100% free and open source

... and the repository contains neither a license, nor the source itself.

> MicroG downloads and runs google code in a privileged context

> many privacy and security issues

> leaking location to apps that dont have the location permission.

Could you share some details on these three points?

There's also https[//]microg.cc and https[//]microg.net, both masquerading as homepages for MicroG, and Duckduckgo finds several more. I actually reported the latter to Namecheap a year ago, but got no response back.

Is there a good authority to report these to? Clearly registrars aren't interested in taking them down, and they're probably not serving malware right now, but fake download sites for software running with elevated privileges is a security incident waiting to happen.

Tor is great for this, as long as you're willing to put up with very long domain names, a mild amount of stigmatization, and an extra software requirement for visitors.

I'm so incredibly disappointed that my country, specifically the .si registry and everyone up the chain, is complicit in this :(

I'm sure there's several ways in which ICANN and RIPE could screw Russia over. I'm also sure (or at least hopeful) they understand this would achieve nothing outside of creating a splinternet.

From the guidelines:

> Please don't pick the most provocative thing in an article or post to complain about in the thread. Find something interesting to respond to instead.