Keyoxide: aspe:keyoxide.org:KI5WYVI3WGWSIGMOKOOOGF4JAE (think PGP key but modern and easier to use)

  • 0 Posts
  • 29 Comments
Joined 2 years ago
cake
Cake day: June 18th, 2023

help-circle



  • As best I can tell, Mull is us.spotco.fennec_dos, so on that list.
    Mulch is likely us.spotco.mulch based on mulch webview being us.spotco.mulch_wv, neither are on the list.

    My interpretation here is that Mulch uses some other system, perhaps that mentioned api or something else entirely. Therefore it needs no explicit mention and just works. It might be that it previously did not support that system, or bitwarden didn’t, but somehow now it does.
    On the other hand, Mull still requires the manual compat lsit for whatever reason, therefore now in ironfox you run into that issue. In Mull it was likely solved before you ever used it.



  • Maybe bitwarden has a hardcoded list of browsers and defaults to the app id otherwise? There could also be an override, but if not you’d have to open an issue with bitwarden and wait for them to update their list.

    Edit:
    Looking into the code there is indeed a hardcoded list.
    This file contains the code

    // Docs state that password fields cannot be reliably saved in Compat mode since they will show as
    // masked values.
    bool? compatRequest = null;
    if (Build.VERSION.SdkInt >= BuildVersionCodes.Q && fillRequest != null)
    {
        // Attempt to automatically establish compat request mode on Android 10+
        compatRequest = (fillRequest.Flags | FillRequest.FlagCompatibilityModeRequest) == fillRequest.Flags;
    }
    var compatBrowser = compatRequest ?? CompatBrowsers.Contains(parser.PackageName);
    

    I read this as:
    There are browsers that do “native” autofill and ones that do “compat”. Mull and ironfox do compat.
    This compat support is communicated on Android 10+, but either on older android or maybe if the app is built for older android (?) it won’t be communicated, thus the hard coded list.

    Doesn’t look like there is a way for users to add to this list.



  • Yeah that seems about right.

    I don’t know how the versioning works for the Android versions here…

    Android has the same versions as desktop here, which is why there is no differentiation. The main chunk of firefox is platform independent (and even used in thunderbird too).

    So any firefox android app and fork thereof needs that version 131.0.3+ too (unless it is esr which is 128 currently).






  • They were doing the same on other repos for months.
    Both their npm module and android client.
    On android they tried to get people to add their own fdroid repo because the official fdroid has not had updates for 3 months due to the license changes.

    Edit: Looking at it now compared to 4 days ago, they apparently got frdoid to remove bitwarden entirely from the repo. To me this looks like they are sweeping it under the rug, hiding the change pretending it has always been on their own repo they control.

    Next time they try this the mobile app won’t run into issues, the exact issues that this time raised awareness and caused the outcry on the desktop app, which similarly is present in repos with license requirements.

    If they were giving up on their plan, wouldn’t they “fix” the android license issue and resume updating fdroid, instead of burning all bridges and dropping it from the repo entirely, still pushing their own ustom repo? Where is the npm license revert?



  • It means previous versions remain open, but ownership trumps any license restrictions.
    They don’t license the code to themselves, they just have it. And if they want to close source it they can.

    GPLv3 and copyleft only work to protect against non-owners doing that. CLA means a project is not strongly open source, the company doing that CLA can rugpull at any time.

    The fact a project even has a CLA should be extremely suspect, because this is exactly what you would use that for. To ensure you can harvest contributions and none of those contributers will stand in your way when you later burn the bridges and enshittify.