Hans-Christoph Steiner

I make no claim that this panic stuff covers all threats, it does cover some common ones. For example, I've heard many reports from all over the world of people...

because this app has the word "bitcoin" in the package name, it doesn't hide as well as possible. If the package name was more generic, it would hide even more.

Google recently posted some kind of source for its Google Webfonts collection (aka https://www.google.com/fonts): - https://github.com/google/fonts I've been thinking about packaging them all for Debian/Ubuntu/Mint/etc. But `npm` sounds like it...

Good to see progress here! I can help out with the process. One thing to note is that the whole Google web fonts collection are free fonts that could be...

Android's `Binder` model means that all the things that need Tor bind to it with `BIND_IMPORTANT`. That tells Android to keep it alive. Then for letting `TorService` quit when idle,...

The Chromium docs outline some nice security properties of bound services: https://chromium.googlesource.com/chromium/src.git/+/refs/heads/main/docs/security/android-ipc.md#binder

It seems to me that we should be recommending _WorkManager_ here also. Google is putting a lot of work into it to make it the complete background task runner. This...

There isn't really documentation outside of the example code and apps at this point. We welcome contributions. You can see it in production code in the TorServices app, OnionShare, Orbot,...

Sounds good to me. My experiences with proguard have always left me mystified as to what is actually going on, so I don't feel qualified to take it on.

ah, that sounds like a good catch! I could never reliably reproduce it to troubleshoot it.