61–70 of 97 posts
Love this app, makes it really easy to keep non-store apps up to date by linking directly to the apps GitHub repo for example. Obviously you have to be careful what you install, just as with any app not found in Play Store, but if you're getting your apps elsewhere anyway this is really convenient.
How?
Earlier quoted context omitted.
> Lets not forget that certificates are created and checked for github.com, so unlikely for a middleman to get in. What? Don't assume that the APKs are generated by GitHub's CI, anyhow, anything can be uploaded as a release
Github should provide a certificate when binaries are built from source with their tools.
In any case, there's for sure no GitHub certificate added to the APKs
1. F-Droid 2. FFUpdater 3. Obtanium 4. Aurora Store
Earlier quoted context omitted.
> just as with any app not found in Play Store I would recommend caution with apps from the store too. Not only are many predatory practices not disallowed, outright malware can and does slip through review. The advice is the same as ever when it comes to computers: don't run programs you don't trust, and set your bar of trust high.
Alright, well I don't think I personally know anyone who has ended up with malware on their phone. I'm sure it could be better but it seems alright. I'm not gonna advise everyone I know to stress out about it by trying to have a high bar of trust and evaluate every app they wanna try only to have the exact same result they've had for years. The advice is absolutely not the same as it's always been - it would be weird…
[0] https://www.tomsguide.com/news/these-35-malicious-android-ap...
I'll give this a shot. F-Droid is broken on Android 15 and nobody cares.
i've been using this app and i honestly prefer it this way. Lets not forget that certificates are created and checked for github.com, so unlikely for a middleman to get in. I trust github much more than google right now. Especially since the object being fetched is generic as opposed to a appstore. Google's app store has only shown to hinder publishing. Take syncthing for instance. The only thing I wish was better wa…
Earlier quoted context omitted.
Alright, well I don't think I personally know anyone who has ended up with malware on their phone. I'm sure it could be better but it seems alright. I'm not gonna advise everyone I know to stress out about it by trying to have a high bar of trust and evaluate every app they wanna try only to have the exact same result they've had for years. The advice is absolutely not the same as it's always been - it would be weird…
You knowing someone personally is different from the objective millions of infections [0] that we've seen in the real world. [0] https://www.tomsguide.com/news/these-35-malicious-android-ap...
I'd love it to be zero but the amount of vigilance warranted has gotta be a lot less than it was in the past unless there's some argument that magnitude of harm has gone up by a massive amount while probability has gone down by the same amount. Which, idunno, maybe that argument can be made actually.
Also I guess 2001 felt unsafe to visit trusted websites, so the advice upthread was already a bit lessened.
I'll give this a shot. F-Droid is broken on Android 15 and nobody cares.
What is broken in F-Droid? I just got Android 15 and are using F-Droid but have not noticed anything broken yet.