Remix.run Logo
troyvit 8 days ago

I don't have root on my android and I try to avoid using any FAANG's infrastructure. A few weeks ago I bricked my phone and lost a bunch of data because I only backed up my photos. More on that in a sec, but the big thing I learned is how much stuff on my phone I didn't miss once it was gone and how much I did miss.

App backup? who cares? This was a chance for me to see what's new on F-Droid and it's been great (lookin' at you keyboard.futo.org).

I back up my photos using termux, rsync, and rsync.net. This model seems pretty solid. I should extend it to app data, but I don't have an automated way to back up app data yet. It's just a thing I have to do when I think of it, which is a recipe for disaster.

I'm taking syncthing out of the picture. I was using it to share markdown, html and some graphics between devices and my phone, but I regularly end up diffing .conflict files. I hope to get better behavior from Nextcloud.

Still, I'm the same happy guy I was before December 30 so I think a few manual app data back-ups, back-ups for non-photo content to Nextcloud so I can share it between devices more easily, and the same old rsync stuff for photos should work great.

rsync 8 days ago | parent | next [-]

"I back up my photos using termux, rsync, and rsync.net. This model seems pretty solid."

This is a common workflow.

In addition to termux/rsync we do see a number of people using syncopoli.

FWIW, my personal phone is an iphone and I use the excellent 'iexplorer' to browse the phone as if it were a filesystem.

fullstick 8 days ago | parent [-]

Can you share resources on how to backup through termux? I hadn't thought of that.

troyvit 8 days ago | parent [-]

I wrote a how-to!

https://troyvit.net/2023/01/backing-up-android-to-rsync-net/

It has one error. termux-job-scheduler isn't a separate install.

choobacker 8 days ago | parent [-]

One extra tip is to use rrsync to restrict which folders your rsync client can read/write to: https://b.tuxes.uk/termux-rsync-photos.html

This helps mitigate ransomware, and escalation (e.g. reading previously backed up files) attacks.

troyvit 8 days ago | parent [-]

Nice, thank you!

GoblinSlayer 8 days ago | parent | prev | next [-]

I just did tar / | netcat

snapplebobapple 8 days ago | parent | prev | next [-]

try flickboard. once it stops melting your brain it is awesome

udev4096 8 days ago | parent | prev [-]

Stop using F-droid. It is insecure and shouldn't be the primary way of installing apps. Stick to Aurora Store or Play Store

npteljes 8 days ago | parent | next [-]

I read your sources, and one, as a user, I'll let these people sort out their drama among themselves, two, the security issues of the apps that are downloaded I think are way higher potentially than the ones in F-Droid in itself. With these considerations, F-droid is fine as a way of installing apps. Just as fine as any other technically imperfect service, business, or product that we use daily. In fact, I consider it higher than average in quality.

vroomik 8 days ago | parent | prev | next [-]

Could you elaborate on that? Do you mean bigger possibility of apps containg malware or what?

udev4096 8 days ago | parent | next [-]

https://privsec.dev/posts/android/f-droid-security-issues/, the recent findings of bypass of certificate pinning [0], wireguard creator doesn't trust f-droid himself [1], continued harmful attacks to GrapheneOS devs [2] and a few more points regarding their build infra using a deprecated debian release.

[0] https://www.openwall.com/lists/oss-security/2024/04/08/8

[1] https://gitlab.com/fdroid/fdroiddata/-/issues/3110#note_1613...

[2] https://gitlab.com/ironfox-oss/IronFox/-/issues/7#note_22877...

Timshel 8 days ago | parent | prev [-]

The handling of the project appears quite troubling, the whole board resigned last year: https://gitlab.com/fdroid/admin/-/issues/447

orbital-decay 8 days ago | parent | prev [-]

Why is it insecure?