Jkoan
@jkoan@fosstodon.org replied  路  activity timestamp 2 weeks ago
@fdroidorg as a workaround, what about spinning up a VM with emulation that supports what's missing? Sure it's slower but it should be plausible and could provide needed security fixes for affected apps.
Of course this only makes sense if the time until the servers can be replaced is long enough to make the effort of setting up the VM worth it.
Hans-Christoph Steiner
@eighthave@social.librem.one replied  路  activity timestamp 2 weeks ago
@fdroidorg We have to put a lot of trust in a couple of systems: the signing server and the production buildserver. That is why they are not easy to upgrade. That provides key benefits down the line, like knowing that the client app will always receive uncompromised files, no matter where it downloads the files from (e.g. verification via the signed index). Thanks for your patience while we work in getting new hardware into our trusted #secure #maintenance setup. 1/2