tmw 🌈

pedestrian (in every sense). former calyxos dev; done with android now. trans rights are human rights. furries are cool. if you present as fashy, i'll probably block you. boosts aren't necessarily endorsements.

pronouns: they/them or he/him
code mess: https://codeberg.org/t-m-w
former code mess: https://gitlab.com/t-m-w

Last Notes

2026-09-09 12:46:06 GMT

my cat when i try to pet her after i've been petting other cats
https://files.ioc.exchange/iocexchange/media_attachments/files/117/241/141/215/262/793/original/632d92e42ce776de.png

2026-09-06 11:47:37 GMT

- reply

no one's freedom to express personal opinions is being suppressed here though, so i don't know what this is about, unless you think people need to quietly accept hatred. but that wouldn't be very free, would it?

2026-09-05 20:59:41 GMT

- reply

do people usually join with video/audio on? like, would it be outside the norm or uncomfortable for others if someone joined in text only?

2025-10-20 08:55:28 GMT

since i know a lot of former #calyxos users are reasonably considering switching to #grapheneos (or already have), here are some tips for navigating their community:
* never question project leadership.
* never question security or privacy features or implementations.
* do not associate with any projects or individuals that they hate-stalk around the internet.
* no criticism, even constructive.
* make peace with the potential for baseless accusations and smears.
these tips also useful for oems. 💕

2025-10-13 13:38:18 GMT

- reply

not sure if you even read this part or just kneejerk responded with criticism as always, but if calyx doesn't have all the keys, how can they keep releasing updates?
it's a rhetorical question. feel free to respond, but remove me from the @, because if you @ me again i will block you. i have no interest in putting up with your persistent bad faith and uninvited, uninformed knowitallism.

2025-10-12 14:12:50 GMT

- reply

allegedly, and from my perspective as a former calyxos employee (i do not represent them)...
the founder was the keeper of the signing keys, and has stated this publicly. when he separated from the institute (which is a whole other story), he didn't give the signing keys to the institute in a timely manner, if at all. although there was no evidence that the keys had been compromised or accessed from outside the organization, there *was* reason to believe that they had not always been handled in a secure manner (which is yet another whole other story). also, because these were key *files*, and probably not even protected by passphrases (but i don't know), copies were always *possible*.
the OS team decided to only release updates signed with *fully* trusted keys going forward, that were not subject to unauthorized copies. the OS team has been working on a hardware security module-based solution for signing. the exception to this was one last update to inform users about this situation, to the extent permitted by comms folks. this was facilitated by eventual cooperation from the founder.
that being said, i do not myself believe that there is any actual risk today associated with using a build signed with these older keys, apart from it not having the latest updates. but i also support switching to new keys that are better safeguarded, and i can't guarantee there wouldn't be a risk associated with these older keys in the future.
there is more to know as well, but too much to write here. still, it is false to say that the calyxos team doesn't want you to know this.
source: i worked on #calyxos while all this was happening. i no longer work for #calyx. and this is all just alleged, based on what i experienced and was told. i never signed an NDA 🙃