frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Open in hackernews

The recently lost file upload feature in the Nextcloud app for Android

https://nextcloud.com/blog/nextcloud-android-file-upload-issue-google/
145•morsch•7h ago

Comments

jsnell•4h ago
Dupe (250 points, 170 comments): https://news.ycombinator.com/item?id=43970959
sierra1011•4h ago
Arguably the originator's blog post has some individual merit beyond an article from a tech news aggregator.
inigoalonso•4h ago
This is exactly why the EU's Digital Markets Act exists. And why it needs teeth. Google disabling Nextcloud's all-files access on Android, while quietly letting its own apps and big corporate players keep it, isn't about "security". It's about control. Nextcloud is a European, privacy-first alternative built on open standards and that can be fully aligned with GDPR requirements. Blocking its core functionality while favouring your own services is a textbook abuse of platform power. Android was supposed to be open, but moves like this show it (at least the Play Services verison) is just another walled garden. If the EU is serious about digital sovereignty and fair competition, this is the kind of behaviour that must be stopped. Otherwise, no European tech, no matter how compliant, open, or user-friendly, stands a chance.
darkwater•3h ago
Waiting for the nitpicker crowd "you can install AOSP and/or sideload APKs easily, so there is no incumbent abuse here!", just like we had them for IE (you can install another browser) and iPhone (you can buy another brand).

Edit: oh we already have them in the other submission

raverbashing•2h ago
Yeah it's the "less space than a Nomad" people

I know, I used to be one of those

geff82•1h ago
Just use e/os ! ;)
subscribed•59m ago
Maybe something else instead. e/os famously leaves the bootloader gaping open after the installation (looks like relocking is only supported on Fairphones), is very late to release anything (their most recent ROM is still based on AOSP 14!), inc.securty updates.

Doesn't sound like a serious project.

em-bee•12m ago
what else?

i'd rather have secure, stable and slow. i don't know about locking the bootloader (do you have a reference to that? i'd like to read up on it). but i don't care that their rom is always the most recent one.

what matters is that e/OS is the only rom i am aware of that combines usability with security. graphene OS doesn't count because it is only available on pixel phones and therefore very limited in applicability. others i don't know.

Hilift•2h ago
Mobile is a second class operating system platform. A browser or OS you use on a desktop can easily be configured to block/filter things. Mobile users are exposed to popups/malware/DNS hijacking daily. If they didn't, mobile would not be the gravy train of clicks for advertisers.
jeroenhd•1h ago
What apps in Google's ecosystem have the "all files" permission? Google Drive certainly doesn't. The "upload" button on GDrive prompts you to select a file just like NextCloud does.

The "sync just one folder" functionality exists in SAF without any high-risk permissions. Migration of existing profiles may be a pain (as the user would need to grant permission on the folder when switching to the new API).

Synchronisation of the entire virtual storage, the download folder, or any extra folders vendors like Samsung might've added to the blacklist, isn't possible with the new API, but it's also not possible with Google's own services. The DMA only requires Google not to be put in a special position; as long as they don't offer such a feature, they don't need to offer it to NextCloud.

yard2010•3h ago
Goddammit Pichai. We had something mediocre, why enshitify it to the oblivion?
BLenkomo•2h ago
I would like to have both options: Full file access and controlled access. I guess not eveyrone wants nextcloud full file sync.

But yes this is shitty regarding google.

jeroenhd•2h ago
> SAF cannot be used, as it is for sharing/exposing our files to other apps

SAF can be used. There are reasons why this wouldn't be a good fit for NextCloud (you can't share your entire internal storage, your download folder, or the root of an SD card, for instance), but I don't think NextCloud's statement makes sense.

lozenge•1h ago
The point of their app is to backup an entire folder. Sharing from one app to Nextcloud doesn't provide ongoing access to backup later versions of the file.
jeroenhd•1h ago
Which they can do, using SAF, without the "access to everything everywhere" permission that they want.
sirdvd•30m ago
> permission that they want

"they", in my case it's me. With on my own Nextcloud server, on my own LAN. It's me that want "access to everything everywhere". Difficult for me to think that is not about gate keeping from Google.

deng•1h ago
Entirely correct, for instance see

https://developer.android.com/training/data-storage/shared/d...

This was discussed yesterday:

https://news.ycombinator.com/item?id=43970959

AmazingTurtle•1h ago
We feel your pain at Nextcloud. Our team at Everfind (unified search across Drive, OneDrive, Dropbox, etc.) has spent the past year fighting for the *drive.readonly* scope simply so we can download files, run OCR, and index their full-text for users. Google keeps telling us to make do with *drive.file* + *drive.metadata.readonly*, which breaks continuous discovery and cripples search results for any new or updated document.

Bottom line: Googles "least-privilege" rhetoric sounds noble, but in practice it gives Big Tech first-party apps privileged access while forcing independent vendors to ship half-working products - or get kicked out of the Play Store. The result is users lose features and choices, and small devs burn countless hours arguing with a copy-paste policy bot.

theodric•13m ago
Sounds like it's time for an(other) antitrust lawsuit. At least Nextcloud is based in Europe, which has recently shown an appetite to stand up to tech giants on some things.
thombles•1h ago
This is also why the official SyncThing Android app stopped being distributed. There is a fork but it's not available on the Play Store.
deng•1h ago
The problem with the SyncThing Android app is that it's just a wrapper around SyncThing, which is a Go library, but SAF does not give you simple file descriptors you can use in native code. Instead, you get "content://" URLs, and you need a Java/Kotlin bridge to convert these to file descriptors. That would need to be done in SyncThing itself.

However, AFAIK, this problem would not apply to the NextCloud app.

treyd•38m ago
> and you need a Java/Kotlin bridge to convert these to file descriptors.

Do you need it in these languages or could you use anything that can make binder calls?

deng•23m ago
To my knowledge you cannot access SAF through binder, for sure not officially.
fsh•20m ago
The fork is in the play store and works fine for me on Android 15: https://play.google.com/store/apps/details?id=com.github.cat...

I was a bit surprised that the official client suddenly disappeared though.

gitroom•44m ago
damn this hits hard, i always feel locked out when stuff gets taken away like that - you ever wonder if tech shifts like this actually give us more control or just pull it away?
igtztorrero•12m ago
Google's former motto, "Don't be evil," was a key part of their corporate code of conduct, emphasizing ethical and transparent business practices. In 2015 the motto was removed, since then we are in their clutches. Now they are like Microsoft, that's the reason Nextcloud was created!
tacker2000•5m ago
Google abusing their power, as usual. I guess Google Drive doesnt have these restrictions, does it? It's time the Europeans move together against these blatant antitrust violations.

E-COM: The time the USPS spent $40M subsidizing junk (e)mail

https://buttondown.com/blog/the-e-com-story
22•rfarley04•55m ago•6 comments

How to Build a Smartwatch: Picking a Chip

https://ericmigi.com/blog/how-to-build-a-smartwatch-picking-a-chip/
104•rcarmo•5h ago•51 comments

Databricks and Neon

https://www.databricks.com/blog/databricks-neon
92•davidgomes•2h ago•52 comments

Writing that changed how I think about programming languages

https://bernsteinbear.com/blog/pl-writing/
205•r4um•8h ago•20 comments

RPG in a Box

https://rpginabox.com/
210•skibz•4d ago•43 comments

UK's Ancient Tree Inventory

https://ati.woodlandtrust.org.uk/
20•thinkingemote•2h ago•12 comments

Interferometer Device Sees Text from a Mile Away

https://physics.aps.org/articles/v18/99
16•bookofjoe•3d ago•2 comments

Ash Framework – Model your domain, derive the rest

https://ash-hq.org/
127•lawik•3d ago•63 comments

The recently lost file upload feature in the Nextcloud app for Android

https://nextcloud.com/blog/nextcloud-android-file-upload-issue-google/
145•morsch•7h ago•28 comments

Flattening Rust’s learning curve

https://corrode.dev/blog/flattening-rusts-learning-curve/
308•birdculture•14h ago•238 comments

Type-constrained code generation with language models

https://arxiv.org/abs/2504.09246
216•tough•14h ago•92 comments

Branch Privilege Injection: Exploiting branch predictor race conditions

https://comsec.ethz.ch/research/microarch/branch-privilege-injection/
392•alberto-m•20h ago•163 comments

Google is building its own DeX: First look at Android's Desktop Mode

https://www.androidauthority.com/android-desktop-mode-leak-3550321/
362•logic_node•22h ago•290 comments

Replicube: A puzzle game about writing code to create shapes

https://store.steampowered.com/app/3401490/Replicube/
87•poetril•10h ago•21 comments

Bus stops here: Shanghai lets riders design their own routes

https://www.sixthtone.com/news/1017072
268•anigbrowl•8h ago•196 comments

Launch HN: Miyagi (YC W25) turns YouTube videos into online, interactive courses

188•bestwillcui•23h ago•102 comments

Show HN: HelixDB – Open-source vector-graph database for AI applications (Rust)

https://github.com/HelixDB/helix-db/
188•GeorgeCurtis•19h ago•79 comments

Build real-time knowledge graph for documents with LLM

https://cocoindex.io/blogs/knowledge-graph-for-docs/
149•badmonster•17h ago•25 comments

Failed Soviet Venus lander Kosmos 482 crashes to Earth after 53 years in orbit

https://www.space.com/space-exploration/launches-spacecraft/failed-soviet-venus-lander-kosmos-482-crashes-to-earth-after-53-years-in-orbit
161•taubek•3d ago•116 comments

Show HN: acmsg (automated commit message generator)

https://github.com/quinneden/acmsg
5•qeden•2h ago•8 comments

EM-LLM: Human-Inspired Episodic Memory for Infinite Context LLMs

https://github.com/em-llm/EM-LLM-model
76•jbotz•4d ago•9 comments

Multiple security issues in GNU Screen

https://www.openwall.com/lists/oss-security/2025/05/12/1
391•st_goliath•1d ago•236 comments

PDF to Text, a challenging problem

https://www.marginalia.nu/log/a_119_pdf/
308•ingve•21h ago•169 comments

Mipmap selection in too much detail

https://pema.dev/2025/05/09/mipmaps-too-much-detail/
74•luu•3d ago•21 comments

The Internet 1997–2021

https://www.opte.org/the-internet
52•smusamashah•1d ago•12 comments

Airbnb is in midlife crisis mode

https://www.wired.com/story/airbnb-is-in-midlife-crisis-mode-reinvention-app-services/
183•thomasjudge•17h ago•378 comments

The world could run on older hardware if software optimization was a priority

https://twitter.com/ID_AA_Carmack/status/1922100771392520710
756•turrini•1d ago•677 comments

It Awaits Your Experiments

https://www.rifters.com/crawl/?p=11511
178•pavel_lishin•21h ago•61 comments

$20K Bounty Offered for Optimizing Rust Code in Rav1d AV1 Decoder

https://www.memorysafety.org/blog/rav1d-perf-bounty/
49•todsacerdoti•4h ago•42 comments

Using obscure graph theory to solve programming languages problems

https://reasonablypolymorphic.com/blog/solving-lcsa/
81•matt_d•16h ago•17 comments