Good to see a list of apps with source code!
Fossdroid.com: Free and open source Android applications
41–50 of 76 posts
Re: Fossdroid.com: Free and open source Android applications
#42Nice Job. How do you accept new entries? Do you have/plan to build an installer app like the f-droid project? That app itself could use a modern design like you have done :-)
You submit new apps to F-droid. This is just a front-end to their database.
Re: Fossdroid.com: Free and open source Android applications
#43Earlier quoted context omitted.
And if you're going to add signatures please don't make them MD5/SHA1. I don't understand why so many sites still offer those. Is it some default feature of some software stack where developers just "check" a button for signatures and it only supports MD5/SHA1? Otherwise I can't explain it.
In Windows world, you basically have to use SHA1 digests for digital signatures (though you use SHA2 certs to do the signing) as Windows XP doesn't support SHA2 at all, Windows Vista SP1 or SP2 prior to a patch a view years ago won't run the EXE or show an error due to a buffer overrun, and Windows Vista's Internet Explorer full patched will show the download as "reported unsafe" due to an unfixed bug in IE.
What do APK signatures have to do with Windows?
Re: Fossdroid.com: Free and open source Android applications
#44Earlier quoted context omitted.
And if you're going to add signatures please don't make them MD5/SHA1. I don't understand why so many sites still offer those. Is it some default feature of some software stack where developers just "check" a button for signatures and it only supports MD5/SHA1? Otherwise I can't explain it.
I recommend RSA (GnuPG) or Ed25519 signatures with two key pairs: A weekly/monthly signing key pair, and a long-term one that is only used to validate the short-term public key. https://scott.arciszewski.me/blog/2015/01/package-signing-th...
Key rollover and certificate trust chains don't work in Android world.
Re: Fossdroid.com: Free and open source Android applications
#45I think some people are confused/missing the point. This isn't competing with F-Droid, it IS F-Droid. Everything from the statistics to the APK downloads (notice the redirect) are sourced from https://f-droid.org/ . It's a beautiful front end and necessary improvement over what exists, but it's complementary not competitive. My $0.02: 1. Link to download button to the app entry in F-Droid so I can download it from th…
Yes, isn't competing with F-Droid...it's just a frontend for F-Droid with popularity data.
Re: Fossdroid.com: Free and open source Android applications
#46I really like the popular "popular" sections, the one thing that's missing from f-droid. What could be improved: 1. HTTPS, especially for APK downloads 2. Information about the APKs: built/signed by whom
Google has made it so you can't enforce APK signatures via PKI on android os. Gee, I wonder why!
Re: Fossdroid.com: Free and open source Android applications
#47I really like the popular "popular" sections, the one thing that's missing from f-droid. What could be improved: 1. HTTPS, especially for APK downloads 2. Information about the APKs: built/signed by whom
Google has made it so you can't enforce APK signatures via PKI on android os. Gee, I wonder why!
Sure you can. Android itself just doesn't do it for you, but the F-Droid installer could very well verify the APK before installing it.
Re: Fossdroid.com: Free and open source Android applications
#48Thanks for this! Will try and learn how to make my own apps by reading the source of others.
we need to thanks https://f-droid.org :)
Re: Fossdroid.com: Free and open source Android applications
#49Earlier quoted context omitted.
Thanks for the suggestions :)
And if you're going to add signatures please don't make them MD5/SHA1. I don't understand why so many sites still offer those. Is it some default feature of some software stack where developers just "check" a button for signatures and it only supports MD5/SHA1? Otherwise I can't explain it.
[deleted]
Re: Fossdroid.com: Free and open source Android applications
#50Something of a tangent, but i really wish it was possible to whitelist specific apps to act as "stores". Right now if i want to use F-Droid or similar i have to either leave my device open for others to also be able to install, or constantly juggle the "unknown sources" option.
You can! You just need to make the F-Droid app a System app, then it can install applications without having to keep the "unknown sources" options on. You can use this app to do it: https://f-droid.org/repository/browse/?fdid=de.j4velin.syste... You can also disable the "install" script and have it install stuff without any prompts like the play store, just go into the settings, scroll to the bottom and enable "Exper…
Everything here implies one has root.