Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Open-source apps removed from Google Play Store due to donation links

lists.zx2c4.com

Post reply on HN
Print view View original

101–110 of 579 posts

Re: Open-source apps removed from Google Play Store due to donation links

#101

Post by lm28469 »

Santosh83 wrote: post #86

A general comment: the need of the hour is to educate the billions of 'ordinary' computer users about the basics of software, privacy, security and trust. We must not fall into the narrative being parroted around off-late that considers end-users as pretty much dumb content consumers who should not be expected to ever know even the minimum about the underlying tech and therefore every decision needs to be made for th…

> that considers end-users as pretty much dumb content consumers who should not be expected to ever know even the minimum about the underlying tech and therefore every decision needs to be made for them by a small minority of corporations, govts, and the tech elite acting as gatekeepers and overseers.

That's what we do in every other domains, what's the difference here ?

Re: Open-source apps removed from Google Play Store due to donation links

#102

Post by bluGill »

mschuster91 wrote: post #87
na85 wrote: post #49

Earlier quoted context omitted.

It's fucking infuriating that the only way to get the attention of a human at Google is to know someone or to frontpage HN.

Or in Germany to get an emergency court order ("Einstweilige Verfügung"), dunno if the US has a similar legal venue. At least with an EV you get the immediate attention of their legal department.

The US does, but courts are reluctant to issue them in general. Since google as a fair chance of winning the courts will probably reject the immediate order, and then this drags out in court for a few expensive years before a ruling is issued that could go either way, and either way will drag through the appeals process for many more expensive years.

Re: Open-source apps removed from Google Play Store due to donation links

#103

Post by nyolfen »

missosoup wrote: post #92
segfaultbuserr wrote: post #90

Earlier quoted context omitted.

The strangest fact is, those donation pages only have some links, there is no in-app payment. I don't understand what Google is thinking about when they banned donations... Wait. I suddenly understand something I've seen previously... There is a workaround! You simply upload two versions of the app, the free edition and the supporter edition. The support's edition is a paid app. You can ask the users who want to supp…

> I don't understand what Google is thinking about when they banned donations. They're thinking that they're a monopoly and can do whatever the hell they want without needing to justify themselves?

hazarding a guess, i’m assuming people tried using off-platform payments described as donations to sidestep play store payments

Re: Open-source apps removed from Google Play Store due to donation links

#104

Post by nwatson »

etskinner wrote: post #84
LennyWhiteJr wrote: post #82

Earlier quoted context omitted.

Code Signing and HTTPS are two completely unrelated concepts...

Yes, but their point is: Why would you need code signing if https is working correctly when downloading software?

The product is built in a very controlled and secure environment at the core of a company's competency ... code-signing here stamps the product as authoritative and representing the company's efforts.

The website from which you, the customer, download the software often is built and managed under less controlled and more vulnerable circumstances, often with third party involvement. Any bad actor in a long chain of internal caretakers and potentially external hackers can replace the to-be-downloaded artifact HTTPS with malicious junk. Code-signing mitigates this.

Re: Open-source apps removed from Google Play Store due to donation links

#105

Post by Xylakant »

etskinner wrote: post #84
LennyWhiteJr wrote: post #82

Earlier quoted context omitted.

Code Signing and HTTPS are two completely unrelated concepts...

Yes, but their point is: Why would you need code signing if https is working correctly when downloading software?

For example, code signing can protect against an attacker that can swap the application, but not the signing certificate. It can allow retroactive disabling of a certain application by revoking the cert that signed it. In short: HTTPS ensures the integrity of the download at the time the app is downloaded, code signing at the time it runs.

Re: Open-source apps removed from Google Play Store due to donation links

#106

Post by toxik »

etskinner wrote: post #84
LennyWhiteJr wrote: post #82

Earlier quoted context omitted.

Code Signing and HTTPS are two completely unrelated concepts...

Yes, but their point is: Why would you need code signing if https is working correctly when downloading software?

Because somebody might’ve changed the files on the distribution servers. We’ve been signing executables for decades?

Re: Open-source apps removed from Google Play Store due to donation links

#107

Post by segfaultbuserr »

etskinner wrote: post #84
LennyWhiteJr wrote: post #82

Earlier quoted context omitted.

Code Signing and HTTPS are two completely unrelated concepts...

Yes, but their point is: Why would you need code signing if https is working correctly when downloading software?

Semi off-topic, but anyway, I have an supportive argument for you: APKs are signed anyway, the signature is embedded in the package, regardless of whether it's in the app store of not, it the signature has changed, you cannot use a new version to replace the previous version without manual reinstallation, it's an effectively safeguard against phishing.

But only the readers of Hacker News can recognize it. I think it's one of the most powerful argument for a walled garden. Not that I support it, but I acknowledge it's still a powerful argument.

Re: Open-source apps removed from Google Play Store due to donation links

#108

Post by toxik »

segfaultbuserr wrote: post #98
Vogtinator wrote: post #95

Earlier quoted context omitted.

That way google gets a cut of the donation.

Oops, it's not a good idea! I now see the motivation behind it!

This is the reason Apple started doing this way back. Sad to see Google follow suit. I guess the bottom line is the bottom line...

Re: Open-source apps removed from Google Play Store due to donation links

#109

Post by virgilp »

nyuszika7h wrote: post #71
Tepix wrote: post #2

If only there was an alternative to the Apple app store like F-Droid is for Google Play...

AltStore is a thing, assuming you have a Mac...

Apple can still shut it down, and you can bet they will if it gets any sort of popularity.

> Testut imagines Apple could disable the ability to sync over Wi-Fi, but that would just mean plugging in your phone once a week to continue using AltStore

How about limit the number of disable WiFi syncs and force you to plug in once every 8 hours?

Re: Open-source apps removed from Google Play Store due to donation links

#110

Post by dictum »

lm28469 wrote: post #101
Santosh83 wrote: post #86

A general comment: the need of the hour is to educate the billions of 'ordinary' computer users about the basics of software, privacy, security and trust. We must not fall into the narrative being parroted around off-late that considers end-users as pretty much dumb content consumers who should not be expected to ever know even the minimum about the underlying tech and therefore every decision needs to be made for th…

> that considers end-users as pretty much dumb content consumers who should not be expected to ever know even the minimum about the underlying tech and therefore every decision needs to be made for them by a small minority of corporations, govts, and the tech elite acting as gatekeepers and overseers. That's what we do in every other domains, what's the difference here ?

We can act more effectively in the domains in which we are most authoritative, knowledgeable and able to effect change.
Post reply on HN