Notes on digital forensics, systems and privacy.https://arditore.github.io/https://arditore.github.io/blog/android-developer-verification/https://arditore.github.io/blog/android-developer-verification/From 30 September, apps on certified Android devices must trace back to a developer who showed Google a government ID. F-Droid does not have developers in that sense — it has source code and a signing key. That mismatch is not a bug in the policy. It is the policy.Wed, 16 Sep 2026 00:00:00 GMThttps://arditore.github.io/blog/stylesmuggler-cve-2026-75650/https://arditore.github.io/blog/stylesmuggler-cve-2026-75650/CVE-2026-75650 turns Magento's own error reporting into a file-write primitive, then executes it while rendering an email. CVSS 10.0, unauthenticated, and exploited before the patch existed.Wed, 16 Sep 2026 00:00:00 GMT