Since 2022 (afaik) GrapheneOS and its devs’ blogs have been distributing disinformative FUD campaigns against F-Droid, Firefox, Linux and even uBlock Origin, and they promoted accrescent.app and Chromium for years.
They spammed developers to upload their apps to accrescent.app. https://gitlab.com/ironfox-oss/IronFox/-/issues/7
- here is one of there spam account
- this account copy-pasted this same text in 9 popular open-source project within just 1 hour
Have you considered or are you planning on putting your app on Accrescent (app store focused on security, privacy, and usability)
Accrescent is a private and secure Android app store built with modern features in mind.
It was just endorsed by GrapheneOS (considered by many to be the most private and secure mobile operating). GrapheneOS also now has accrescent in their app store.
Right now there is only 9 apps on it. So any new apps added get great installation opportunities from the privacy and security minded community.
Anyway, I really like your app, and would love to see it on Accrescent because it's so easy to install and update apps compared with f-droid, plus much more secure!
Thank you for taking the time to read this. I'm a security and privacy conscious individual, not associated with Accrescent or GrapheneOS (though I use them both).
Xoxo Olivia
- here is the screenshot

They created many blogs with different domains:
- https://madaidans-insecurities.github.io/guides/linux-hardening.html
- https://privsec.dev/posts/linux/linux-insecurities
- https://privsec.dev/posts/android/choosing-your-android-based-operating-system/
- https://madaidans-insecurities.github.io/linux.html
- https://madaidans-insecurities.github.io/android.html
- https://madaidans-insecurities.github.io/firefox-chromium.html
- https://simpleprivacy.fr/basiques/smartphones/
Suspicious GitHub accounts:
- https://github.com/qua3k (madaidans webdev graphaneos ex-dev)
- https://github.com/RKNF404 (secureblue maintainer)
- https://github.com/d4rklynk (simpleprivacy.fr owner)
- https://github.com/Wonderfall/ (privsec.dev side account)
- https://github.com/Ganwtrs (graphaneos dev, privsec dev)
- https://github.com/TommyTran732 (privsec.dev co-owner, grapheneos ex-dev, privacyguides ex-dev, secureblue maintainer)
- https://github.com/akc3n (privsec.dev co-owner and graphaneos member and employer)
- https://github.com/thestinger (grapheneos founder)
https://wonderfall.space/marches-android-alternatifs/
(Translated from French)
I’ve never shied away from expressing my doubts about F-Droid https://privsec.dev/posts/android/f-droid-security-issues/ (I’m mainly referring to its official repository here).
Here they admit privsec.dev is theirs.
and privsec.dev authors are akc3n and TommyTran732
Also, here is a second proof that https://madaidans-insecurities.github.io/ is owned by the same person/group:
also
- https://madaidans-insecurities.github.io/android.html
- https://privsec.dev/posts/android/android-tips/
As you can see, they distribute FUD across many different domains (these are just my findings).
Also, I find that https://discuss.privacyguides.net/t/f-droid-foss-android-app-store/13650 and https://www.privacyguides.org/en/os/linux-overview/ privacyguides team are referencing this BS “research.”
Here is good example how this referance loop create a big problem
Someone write a github issue on secureblue about they want to keep firefox and look at the answer
Thanks for your comments. I'll respond to them individually:
> Please note that Madaidans Article is now pretty old. Many issues still persist, but 3 or so of the linked ones where closed 5mo ago, due to being solved.
Regardless, that article is not the only reference point here. See also the grapheneos article https://grapheneos.org/usage#web-browsing
This project will not switch to firefox unless/until GrapheneOS does.
Do you see the problem? That says that article is not the only referance also reference grapheneos but grepheneos article is the main source of madaidan"s
For the public record, please do not trust anyone who references this disinformation.
Also in lemmy we have at least 1 of their troll @dnzm@lemmy.ml I’m really sorry awkly when I paste this URL https://lemmy.zip/u/Stilic@lemmy.ml Lemmy’s autocomple converted this and thanks @LytiaNP@lemmy.today for warning
please ban this troll and investigate if there is other trolls, we don’t want trolls in fediverse
- Edit: added proof for spam claim, both source account and screenshot (btw this is just one account I find there could be more)
- Edit: every link I referanced also has archive.org snapshots
- Edit: fixed markdown formatting Edit: added akc3n (privsec.dev co-owner and GraphaneOS employer) and qua3k and added info about RKNF404 and Ganwtrs
- Edit: added secureblue example
- Edit: added more information about spam
- Edit: I’m sorry for wrong lemmy user link
- Edit: removed debunked word in title for clarify



As a mere user, I know little about all those technicalities and nothing at all about the various people involved in this arguing, or what’s at stakes for any of them. But I can read a text.
And so I did just that, reading one of the linked pages provided here. From what I’ve gathered, I see a lot of affirmations but very little in terms of demonstrating whatever is being said.
And then when I read this, I start wondering how deep such a misunderstanding is running through the entire argument:
(btw, if anyone else is surprised by the use of the word ‘inclusion’ (to me, it relates more to some societal considerations than anything code related), I had a look and it seems that’s just how they talk about the technical imperatives to allow an app to be included in the F-Droid app-store)
I say it is a misunderstanding because I would not be able to tell if it is an honest incomprehension of something real fundamental, or if it is a clumsy attempt at re-framing some facts in a bad light as a way to make them look like not what they really are.
This also regularly happens against the GNU GPL license: being hated on by some open source proponents as being a burden to deal with… Which (I imagine) it really is… save that this is not what the GNU GPL is bothering with.
The GPL cares about the user. About taking a few rights away from the devs to put them in the hands of the users (the 4 freedoms). So, criticizing the GNU GPL for putting the burden on the dev (which is its objective) is akin to criticizing a surgeon for daring stabbing a patient with their scalpel in order to do surgery on them: it’s kinda… to be expected. And in most cases, said patient should feel more grateful than resentful for that very specific stabbing.
Here, the author here seems to forget what F-droid themselves are saying is their mission statement, in their About page:
They care about the users. So making it somewhat harder for the devs may not be a defect in their work.
Obviously, I have no expertise in deciding how well they are doing that or how hard they making it to the devs (I can write simple Bash scripts, if anyone wants to hire me as a dev). But in that lengthy post I’ve read nothing demonstrating me they’re doing it badly. It’s mostly frustration (which I can understand) and an apparent willingness to prove them wrong (which I can’t be fine with).
Having witnessed how often the GNU itself has been targeted for the same wrong reasons, and why so many huge corporations are so hostile to the GNU GPL, while they still wish to benefit from the whole open source idea just without having to deal with what the GPL stands for. Which is us, the users. And this makes me feel rather uncomfortable, even more so when I read this conclusion (I put together two sentences that aren’t close to one another in the original post, bu they are both part of their conclusion):
Not really.
As a reader, I was presented with many links that’s true. But beyond a certain number of (very similar links) that should be called making ‘noise’, in French we would say ‘noyer le poisson’ (to drown the fish). And most of those links point toward discussions or to people affirming things. But do we need to be reminded that people freely affirming things (say, how flat the earth is, or how our reptilian overlords are secretly ruling the human specs) don’t turn those things they affirm into ‘referenced facts’ and they certainly don’t make for any ‘verifiable’ information. No more than, say, reading the entire Marvel comics will make anyone a competent expert into genetics or superpowers, no mater how accurate said comics can be ;)
My comment is probably too long already, but I would be interested in seeing more discussions around the ‘facts’ presented in that post as maybe I completely did not get it and they’re I onto something real? Things like this, for example that I just can’t raise an eyebrow when I read:
(emphasis mine)
To me, this sounds like non-sense, at best. And making a parallel with Debian make it even worse. But here again, I’m no dev and I may get it wrong. Allow me to explain:
Isn’t it the raison d’être of Debian to be extremely slow on updates? increasing the likeliness of the system remaining rock stable and untouched for years to come while, at the exact same time, still ensuring real quick updates where it truly matters: critical security? Forgetting about the critical updates happening in Debian doesn’t seem very fair…
Also, no one is required to use Debian if they don’t want to use that kind of slow distro, there are plenty alternatives. And, like they say, anyone is free to fork Debian if they they think they can improve upon it. I suppose the same could be said about F-Droid?
Disclaimer regarding Arch and Debian: I was an Arch user a few years ago, I ditched it not because I did not liked it (it was amazing, I liked it a lot, and it taught me a lot more) but because I naively realized that, as a user, I could not care less about constant updates to my apps and to the system. Hence, me switching to its exact opposite (Debian) and then, a year or so later, to… Linux Mint, which I have constantly been using for almost 6 years now as, to me, it feels like the perfect middle ground between almost no updates and constant updates ;)
Edit: clarifications.
Thank you. It’s good to know there are still people who read, research, and criticize. 😇
There are which, I will happily agree with you, is good to know ;)
But do note that I did not read all the linked resources. I shared my thoughts and comments after reading some pages and links.
No problem, in a world of rising zero-click searches/content :( you are a rare find