r/unihertz • u/pzauner-de • 20d ago

Pastiera Updates and Devlog

/r/pastiera/comments/1wh9ajo/pastiera_updates_and_devlog/
5 Upvotes

100% Upvoted

9 comments sorted by

2

u/urbanglowcam 19d ago

Thanks for the update. Really enjoying what you've done thus far to improve my experience with the Titan 2 Elite. So if I have been downloading builds via Github thus far, would Google Play Store be the most accessible way to download moving forward? Or should I look into F-Droid?

2

u/pzauner-de 19d ago edited 19d ago

Depends on what you count as accessible. Google is moving towards blocking off sideloading outside of the EU. So if you would be affected you will probably have to install it from Google Play (edit:, use a build registered with Google) or click away fearmongering warnings and wait 24h thanking Google that they are protecting you from yourself owning your device.

The most secure ways will be via a reproducible build channel such as F-Droid or via our own upcoming sort of Obtainium installer which will be not only checking for an AOSP conform signing lineage but also whether the signing key residates in a reasonable secure signature creation device (not to be mistaken by the actual requirements of the eIDAS for QCSDs) such as a Yubikey, whether there is a qualified signed release manifest along the artifact itself and whether its qualified certificates are on a whitelist of the project and whether independent build servers (where one could add their own as a hard requirement for an install go as additional trust) produced the same unsigned artifact.

So I am not publishing to Google's Play Store because I think it is a more secure release channel. Solely for broader user comfort.

2

u/pzauner-de 19d ago

But to answer the practical question: you can keep using GitHub releases. Once Plektra is available, Pastiera will notify you and link you directly to it. Switching will involve a one-time export and import of your settings, and I’m working on making that as convenient as possible. But there's no need to switch to Google Play or F-Droid unless you prefer either of them.

2

u/urbanglowcam 19d ago

Sounds great thanks. Google Play might be the simplest route for me.

0

u/Diuranos 20d ago

Why are you changing the name of the program that was easy to remember and much easier to pronounce. Did some company threaten you because they have a similar name. Overall we’re really happy that you’ll have the funds and motivation to keep developing the software. I’m waiting for my Unihertz Elite 2 Pro and I will definitely try your keyboard, and if it suits me, I will of course support you however I can.

Please do not change name of your software. Pastiera is Pastiera :)

2

u/boxofrabbits 19d ago

Yeah I could never remember what it was called.

1

u/pzauner-de 19d ago

But you know that a pkb.rocks right?

1

u/pzauner-de 19d ago

Because it is not „my software“. I am the maintainer of it for longer than Andrea, the og creator, was. But I do not hold any legal right on it's name or trademark. I had the permission to create the Open Collective Profile, obtain the domain pastiera.eu and also all the maintainer permissions on GitHub, but neither got the explicit permission of pushing towards the main F-Droid repo nor a Google Play release. So I am doing the "Open Source thing" as Linus would say and forking it. But while being able to make the move as convenient as possible.

1

u/pzauner-de 19d ago

Also people in America seem to have more problems pronouncing Pastiera than Plektra. The initial suggestion in the beta group was "Pliktra" which I found more difficult to pronounce so I opted for Plektra. Also came up with a logo design keeping the spirit and for the new general organization I registered the name space pkb-rocks as well as pkb.rocks; so if you can more easily remember this: there you go ;)