Live data from Hacker News

Fossdroid.com: Free and open source Android applications

fossdroid.com

51–60 of 76 posts

Re: Fossdroid.com: Free and open source Android applications

#51
post #29

Great site and nice UI. Congratulations. Issues/sugestions: 1. Couldn't find an option to add my app. 2. Screenshots of apps would be nice (some people might be more interested in the app itself than in the source code).

>Couldn't find an option to add my app

You can add your app by submitting it to F-Droid. This is just a front end.

Re: Fossdroid.com: Free and open source Android applications

#52
post #10

Earlier quoted context omitted.

I know, it's a side project to learn Symfony 2. I love F-Droid project so i made this web app, I've contacted the authors of F-droid before doing this. Thanks :)

Your project looks great! Is its source available? It'd be nice to add a link the the f-droid page for each application, where such a page exists.

I will do it! Thanks for the suggestion.

Re: Fossdroid.com: Free and open source Android applications

#53

Earlier quoted context omitted.

Google has made it so you can't enforce APK signatures via PKI on android os. Gee, I wonder why!

Sure you can. Android itself just doesn't do it for you, but the F-Droid installer could very well verify the APK before installing it.

No doubt. But it's pretty funny that Google refuses to add a few lines of code to do it via the OS installer.

Re: Fossdroid.com: Free and open source Android applications

#54
post #45

I think some people are confused/missing the point. This isn't competing with F-Droid, it IS F-Droid. Everything from the statistics to the APK downloads (notice the redirect) are sourced from https://f-droid.org/ . It's a beautiful front end and necessary improvement over what exists, but it's complementary not competitive. My $0.02: 1. Link to download button to the app entry in F-Droid so I can download it from th…

Yes, isn't competing with F-Droid...it's just a frontend for F-Droid with popularity data.

Your download links point to the most recent version of the app, which is not always the recommended version available from F-Droid. Recommended versions are marked with a star. For example, http://fossdroid.com/a/fdroid.html serves a download of 0.86 which is an unstable test version. All of this is handled better by the F-Droid client app. The way your site is set up now could lead to a poor user experience if they encounter problems with unstable versions of apps that shouldn't be downloaded by default.

Being open source, you're free to do whatever you like, but I suggest you talk with the F-Droid devs to make sure everything is mutually beneficial.

Re: Fossdroid.com: Free and open source Android applications

#55
post #45

Earlier quoted context omitted.

Yes, isn't competing with F-Droid...it's just a frontend for F-Droid with popularity data.

Your download links point to the most recent version of the app, which is not always the recommended version available from F-Droid. Recommended versions are marked with a star. For example, http://fossdroid.com/a/fdroid.html serves a download of 0.86 which is an unstable test version. All of this is handled better by the F-Droid client app. The way your site is set up now could lead to a poor user experience if they…

Ok thanks, i added this issue :) i hope to fix this soon.

Re: Fossdroid.com: Free and open source Android applications

#56

Earlier quoted context omitted.

Sure you can. Android itself just doesn't do it for you, but the F-Droid installer could very well verify the APK before installing it.

No doubt. But it's pretty funny that Google refuses to add a few lines of code to do it via the OS installer.

What would the OS check the signature against, though? The certs that come with the OS are for validating sites, not apps, so passing a check wouldn't tell you much. It seems that Android would have to add a whole new cert store (and mechanism for adding certs), not just a couple of lines.

Re: Fossdroid.com: Free and open source Android applications

#57

This is a nice way to feature and popularize open source software. It would be nice to have a way to integrate the repo with each individual app. May the play store should have a section like this.

Half the value in this is that it's not the Play store which is blocked in China and practically inaccessible on a phone without the Play store app pre-installed. And they won't let you install it yourself. You've really got to fight to get access.

Re: Fossdroid.com: Free and open source Android applications

#58

I really like the popular "popular" sections, the one thing that's missing from f-droid. What could be improved: 1. HTTPS, especially for APK downloads 2. Information about the APKs: built/signed by whom

It is worth keeping in mind that the download stats which determine popularity [0, 1] should consumed with care. They represent HTTP requests which hit the server to download a particular apk file. Thus, things such as web crawlers can trigger downloads, which result in incrementing the download count.

Having said this, they definitely seem to be useful as a general rule of thumb about how apps are more popular, _relative to other apps_.

[0] - https://gitlab.com/fdroid/fdroiddata/blob/master/stats/total...

[1] - https://gitlab.com/fdroid/fdroiddata/blob/master/stats/total...

Re: Fossdroid.com: Free and open source Android applications

#60

Earlier quoted context omitted.

In Windows world, you basically have to use SHA1 digests for digital signatures (though you use SHA2 certs to do the signing) as Windows XP doesn't support SHA2 at all, Windows Vista SP1 or SP2 prior to a patch a view years ago won't run the EXE or show an error due to a buffer overrun, and Windows Vista's Internet Explorer full patched will show the download as "reported unsafe" due to an unfixed bug in IE.

What do APK signatures have to do with Windows?

I was giving an example of a context when using something stronger than SHA1 doesn't work even though it is supported. To show that there are sometimes reasons other than laziness and on the off chance that there may be something similar with specific versions of Android or possibly some software that deals with APKs.
Post reply on HN