Hacker News new | ask | show | jobs
by shaicoleman 1794 days ago
A few recommendations:

* Google Authenticator => Aegis Authenticator

https://getaegis.app/

* Google Maps => Windy Maps / Maps.me

https://play.google.com/store/apps/details?id=cz.seznam.wind...

https://maps.me/

4 comments

I would recommend Organic Maps. Description: "Organic Maps offers fast offline maps app for travelers, tourists, hikers and cyclists based on top of crowd-sourced OpenStreetMap data and curated with love by MAPS.ME founders."

https://play.google.com/store/apps/details?id=app.organicmap...

And those that use F-droid

https://f-droid.org/en/packages/app.organicmaps/

Thanks! I read good things about Organic Maps, I'll try it out.
For Google Authenticator on iPhone I would recommend Authenticator by Mark Rubin:

Fast

Light

Free

Allows you to backup all tokens in an encrypted backup (not iCloud)

Serious question

Why should I replace Google Authenticator? Since many concerns that are valid, such as (1) you don't own the data, (2) you might be banned any day and (3) your data might be used for ads, doesn't exist in this case?

* Search

* Open source

* Encryption

* Biometric/password authentication

* Import/Export

* Backup/Sync

It's down to trust. Google has a financial incentive to stalk people, has demonstrated that they are willing to use dark patterns to make people act against their own interest when it comes to privacy and their current data processing consent flow (supposedly for GDPR compliance) doesn't actually comply with it.

Let's say you were hiring for a security guard for a bank. You have 2 candidates.

One is a former bank robber, isn't particularly wealthy (so has an financial incentive to rob again) but totally claims he is trustworthy and will no longer rob banks.

The other has no bank-robbing history and happens to have other sources of income meaning they don't have a financial incentive to rob the bank.

Morals or laws around hiring former offenders aside, which one do you pick?

Sure, you can keep a close watch on the ex bank-robber to prevent future incidents just like you can decompile and reverse-engineer Google Authenticator's every update (and do so preemptively before installing said updates), or you can just go with an option that has no demonstrated history of being malicious and has little incentive to do so.

Thank you for mentioning Aegis, a few other folks have recommended it as well. Looks promising!