Denzil Ferreira

Director, Security & Engineering at HMD Secure

I'm a scientist, developer, tinkerer. Toots on life reflections, news reactions, and experimental notes (successes and lessons learned).

My opinions, not my employer, jada jada.

🇵🇹 living in 🇫🇮
#Linux #Fedora #sovereignty #europe

Website: https://denzilferreira.com

Last Notes

2026-07-11 08:44:33 GMT

Well, it looks like #MobilePay reverted to check Play Integrity again. #Europe does not have a chance at Digital Sovereignty if all Android phones must be #Google #Certified and businesses keep the only option of #Play #Integrity.
#Unified #Attestation is the alternative for non Google devices (#Jolla, #Volla, #deGoogled Android) but unless this is mandated by @npub1m96…ag4y, this means all banking and financial services will be monitored, gated and blocked if needed on a whim.

2026-06-25 16:24:41 GMT

In case you missed it, #LineageOS 23.2 is now officially supported on #Fairphone 6, including #Murena variant. You know, in case you want a #deGoogled Android and fully repairable device. e/OS is good as well, but I really did not want microG either. I have my own NLP for location services. UnifiedPush for apps that support it.

2026-06-23 20:01:03 GMT

- reply

is there any plan in motion to stop this monopoly from Google on Android? reCAPTCHA now also requires a Google Certified device status. Soon won't be able to use apps without being locked to Google.

2026-06-23 19:39:24 GMT

EU needs to take a stand on Play Integrity. If app devs enforce Play Integrity, this means only Google Certified devices can use banking, etc. This excludes all alternative mobile OS. No #postmarketOS, no #SailfishOS, no Android derivatives #GrapheneOS etc. You don't need Play Integrity. If someone is capable to install or use alternative OS, they sure know what to install or not install, it is on their responsibility. Using non-root but bootloader unlocked device (otherwise can't use alternative OS) does not make my device less secure. On the contrary, it is using an up to date OS with the latest security patches. Do we really want all mobile devices have to be Google Certified? No. #mobile #integrity #bootloader #unlocked #nonsense #Europe

2026-05-17 17:21:23 GMT

- reply

not the same speed, doggo was throttling 😁 but now I'm motivated for the cake 😉
https://files.techhub.social/media_attachments/files/116/591/062/112/702/913/original/d67aadd0395a0585.png

2025-12-27 22:00:06 GMT

- reply

does this impact Android OS variants that may have used ffmpeg libavcodec from Rockchip under Apache as a way to not open the source? Or it is a far fetched thought?

2025-08-06 09:47:07 GMT

We're expanding our R&D team in Finland and we're looking for Android System Engineers. If you are interested in learning how to compile, change, and deploy your own Android OS, develop and ideate on system applications our customers will enjoy using worldwide and build future technologies from scratch, this is for you.
If you or, someone you know is interested on joining us at HMD, tag them, reach out to me.
PS: This position is Europe-based and you can work remotely from Europe. Most of the team is in Finland.
#job #hiring #hmd #engineer #developer #mobile #android #aosp #hired #fedihire
https://files.techhub.social/media_attachments/files/114/981/181/676/377/243/original/ce2bb9613bf41c06.jpg

2025-05-19 07:05:03 GMT

- reply

ah I see now. You will want the Pi WiFi to also do DHCP to allocate an IP to the WiFi connected device (or set a static IP on the same network IP range and subnet mask so they can see each other. If you can ping the ip of PI, you should be good to go.

2025-05-19 04:54:53 GMT

- reply

yes, works out of the box :) That’s what router does: devices connected with Ethernet are on the same LAN. Internet is available both on LAN and WAN (wireless). Depending on the router settings, you can isolate WiFi clients from LAN as well (Guest WiFi for example does not allow clients to see each other).

2024-12-15 10:54:17 GMT

So, Google is flexing to create the largest e-waste problem. In name of security (aka, force people to upgrade to new phones and trash a perfectly working device), Google is blocking anyone using custom ROMs on their smartphones, even if these ROMs bring latest OS and security patches, long abandoned by the original manufacturer. Apps refuse to work if the device is not seen as “certified” on the Play Store. Apps refuse to work if they are sideloaded. So that leaves you with a device that can run Android, but you can’t use apps that depend on Google Services. Things like push notifications, payments, banking, gone. GrapheneOS has called them out for this move. There is a way to manually add your device to Google Play devices and then you need to use Aurora Store instead of Play Store to install restricted apps. But for how long will this work?
Time to port postmarketOS and Linux to my Hisense A9.
#rant #google #certified
https://discuss.grapheneos.org/d/1718-google-device-registration-for-play-protect-certification-for-custom-roms
https://www.reddit.com/r/Bigme/s/IlMBlex7O0