Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Obtainium: Get Android App Updates Directly from the Source

obtainium.imranr.dev

Post reply on HN
Print view View original

11–20 of 97 posts

Re: Obtainium: Get Android App Updates Directly from the Source

#11

Post by fwn »

pjmlp wrote: post #6
ruiseal wrote: post #3

Earlier quoted context omitted.

You're removing the middleman (Play or F-Droid) so I don't see how.

Usually the middleman validates what the stuff does, before we do it ourselves, yes even though malicious apps get through the cracks, still makes a difference.

It really depends. Many apps currently cannot be distributed through the stores or the maintainers have to endure a lot of bullying to stay in the stores. (Think NewPipe et al)

In these cases, the middlemen like Google are the hostile party. Essentially the threat actor. It is natural: big tech is big tech, because they are very good at limiting user choice.

For these applications, Obtainium is brilliant.

It also shows that the store model that everyone is working to enshrine in digital policy is not the necessity that Big Tech would have everyone believe.

Re: Obtainium: Get Android App Updates Directly from the Source

#12

Post by fwn »

ramon156 wrote: post #10
pjmlp wrote: post #6

Earlier quoted context omitted.

Usually the middleman validates what the stuff does, before we do it ourselves, yes even though malicious apps get through the cracks, still makes a difference.

So if obtanium does checks, the issue is resolved?

The safety-argument functions as an apologetic narrative to justify the gatekeeping.

Strangely, almost everything the Play Store pushes at me (Temu, TikTok, millions of communication apps with dubious reputation) is crap.

I would never install an app without checking the permissions it asks for, researching the owner of the app as well as the the tracking it includes - yet the store never makes those things transparent, quite the opposite.

Google even takes money to show you bad apps through PlayStore app ads designed to look like an organic app listing. This is apparently a mechanism to profit directly from deceiving users. (Right now, for example, it shows a gambling app, some "beautifying" shovelware, and "Tango live streaming," which the author probably believes by heart is not made for porn.)

So either Google is trying to protect its users and just isn't very good at it, or it's a fake argument to hide corporate power.

But it's impossible to know for sure, isn't it?

Re: Obtainium: Get Android App Updates Directly from the Source

#13

Post by idle_zealot »

greenglob wrote: post #7

Love this app, makes it really easy to keep non-store apps up to date by linking directly to the apps GitHub repo for example. Obviously you have to be careful what you install, just as with any app not found in Play Store, but if you're getting your apps elsewhere anyway this is really convenient.

> just as with any app not found in Play Store

I would recommend caution with apps from the store too. Not only are many predatory practices not disallowed, outright malware can and does slip through review. The advice is the same as ever when it comes to computers: don't run programs you don't trust, and set your bar of trust high.

Re: Obtainium: Get Android App Updates Directly from the Source

#14

Post by pjmlp »

fwn wrote: post #11
pjmlp wrote: post #6

Earlier quoted context omitted.

Usually the middleman validates what the stuff does, before we do it ourselves, yes even though malicious apps get through the cracks, still makes a difference.

It really depends. Many apps currently cannot be distributed through the stores or the maintainers have to endure a lot of bullying to stay in the stores. (Think NewPipe et al) In these cases, the middlemen like Google are the hostile party. Essentially the threat actor. It is natural: big tech is big tech, because they are very good at limiting user choice. For these applications, Obtainium is brilliant. It also sho…

Mostly because certain apps refuse to adopt Android APIs, or insist NDK is a full blown GNU/Linux userspace, contrary to Android team official position on the matter.

Re: Obtainium: Get Android App Updates Directly from the Source

#16

Post by __jonas »

fwn wrote: post #11
pjmlp wrote: post #6

Earlier quoted context omitted.

Usually the middleman validates what the stuff does, before we do it ourselves, yes even though malicious apps get through the cracks, still makes a difference.

It really depends. Many apps currently cannot be distributed through the stores or the maintainers have to endure a lot of bullying to stay in the stores. (Think NewPipe et al) In these cases, the middlemen like Google are the hostile party. Essentially the threat actor. It is natural: big tech is big tech, because they are very good at limiting user choice. For these applications, Obtainium is brilliant. It also sho…

How does that apply to F-Droid though? I don't think they are bullying any of the app maintainers, NewPipe seems to be on there?

Re: Obtainium: Get Android App Updates Directly from the Source

#17

Post by aucisson_masque »

idle_zealot wrote: post #13
greenglob wrote: post #7

Love this app, makes it really easy to keep non-store apps up to date by linking directly to the apps GitHub repo for example. Obviously you have to be careful what you install, just as with any app not found in Play Store, but if you're getting your apps elsewhere anyway this is really convenient.

> just as with any app not found in Play Store I would recommend caution with apps from the store too. Not only are many predatory practices not disallowed, outright malware can and does slip through review. The advice is the same as ever when it comes to computers: don't run programs you don't trust, and set your bar of trust high.

Agree, the play store isn't secure one bit.

We hear enough story how Google removes legit app without reason, using automated process, to know that there is at least as much malicious app that goes through being undetected.

Re: Obtainium: Get Android App Updates Directly from the Source

#18

Post by realusername »

pjmlp wrote: post #6
ruiseal wrote: post #3

Earlier quoted context omitted.

You're removing the middleman (Play or F-Droid) so I don't see how.

Usually the middleman validates what the stuff does, before we do it ourselves, yes even though malicious apps get through the cracks, still makes a difference.

> Usually the middleman validates what the stuff does

That's what they say for their defense yeah but personally I don't buy it. I've published an app myself and I've also seen the countless app scams which are allowed to advertise on YouTube.

The value we get from the store is dubious.

Re: Obtainium: Get Android App Updates Directly from the Source

#19

Post by gchamonlive »

pjmlp wrote: post #6
ruiseal wrote: post #3

Earlier quoted context omitted.

You're removing the middleman (Play or F-Droid) so I don't see how.

Usually the middleman validates what the stuff does, before we do it ourselves, yes even though malicious apps get through the cracks, still makes a difference.

This is the case if the app store is done right, that is, if it has the end user's interests in mind. But as with all things Google, the end product always boils down to how much profit it can extract from its services in ad revenues, so there isn't really that much incentive in Google to keep the Play Store tidy.

This or some variation of the idea. The result is the same, what should protect the user becomes a vector to help spread malicious apps.

Post reply on HN