If, like me, you’ve relied on Fennec as a more tolerable version of Firefox for Android, you may have gotten some bad news in the latest F-droid update cycle.

Fennec has fallen so far behind on updates that serious security patches implemented by Mozilla in Firefox haven’t been applied to the fork, and Fennec is therefore still breachable.

The developer responded two weeks ago that they were “short on time”, and there still isn’t a new, secure version available. This appears to be due to that recurring weak link in open source development: small teams, confronted by real life demands like time and money?

  • AnyOldName3@lemmy.worldEnglish
    291·
    9 hours ago

    Upstream Firefox doesn’t comply with FDroid’s rules (thanks to the ‘proprietary bits and telemetry’ Handles mentioned), so is only available from the Play Store or as a loose APK that won’t auto-update.

    • deegeese@sopuli.xyzEnglish
      3·
      4 hours ago

      This reads like “they only sell hamburgers at the grocery store, and they don’t sell veggie burgers at the hippie food store because they aren’t vegan”

      • doctortran@lemm.eeEnglish
        72·
        6 hours ago

        Cool.

        But I’m not adding another method of updating apps just for the browser. F-Droid is where my non-play store apps live and update from, and I’d like to keep it that way.

        • EddyBot@discuss.tchncs.deEnglish
          6·
          6 hours ago

          I use Obtainium (available in F-Droid) alongside F-Droid since both have auto-updates
          this is still tolerable to the old days of updating manually

          biggest upside is I can update Tubular/Newpipe faster via Obtainium while F-Droids build system takes days