Earlier quoted context omitted.
how does this matter?
You risk losing your entire Google account along with all documents, photos, mail, and whatever else you have there. Enough stories of this happening if you look around.
SmartTube Compromised
61–70 of 155 posts
Re: SmartTube Compromised
#62Earlier quoted context omitted.
I think it's more shocking to people how much YouTube Premium costs.
Is $14 dollars for ad-free, unlimited access to literally billions of videos really a steep price? Personally if I were to get rid of all but one of my media subscriptions I would stick with this one, since it's got everything - entertainment, education, inspiration, you name it.
Most youtube content being disguised ads, this cannot be true.
Re: SmartTube Compromised
#63Re: SmartTube Compromised
#64Earlier quoted context omitted.
how does this matter?
You risk losing your entire Google account along with all documents, photos, mail, and whatever else you have there. Enough stories of this happening if you look around.
Also are you really using same account for gmail, your personal pictures/docs and youtube?
Re: SmartTube Compromised
#65It's kind of shocking to me that so many people would download an app like this and sign in using their actual YouTube account.
Re: SmartTube Compromised
#66I hope that Flatpak and similar technologies are adopted more widely on desktop computers. With such security technology existing, giving every application full access to the system is no longer appropriate.
Re: SmartTube Compromised
#67Re: SmartTube Compromised
#68Earlier quoted context omitted.
Is $14 dollars for ad-free, unlimited access to literally billions of videos really a steep price? Personally if I were to get rid of all but one of my media subscriptions I would stick with this one, since it's got everything - entertainment, education, inspiration, you name it.
$14 is two days worth of living in my country for your average man on the street, among many other similar places. Imagine if you had to pay $200 to watch YouTube, that's how much these services cost for us. They refuse to correct for purchasing power parity and are left with nothing in the end. Steam seems to do very well in comparison. (I don't watch YouTube even for free, but practically everybody I know does with…
Re: SmartTube Compromised
#69Earlier quoted context omitted.
Is $14 dollars for ad-free, unlimited access to literally billions of videos really a steep price? Personally if I were to get rid of all but one of my media subscriptions I would stick with this one, since it's got everything - entertainment, education, inspiration, you name it.
$14 is two days worth of living in my country for your average man on the street, among many other similar places. Imagine if you had to pay $200 to watch YouTube, that's how much these services cost for us. They refuse to correct for purchasing power parity and are left with nothing in the end. Steam seems to do very well in comparison. (I don't watch YouTube even for free, but practically everybody I know does with…
"Purchasing power parity" is a non-concept for almost 100% of companies and products. But YouTube Premium is priced differently in different regions. Sometimes much cheaper than $14.
Re: SmartTube Compromised
#70Friends, it seems that my digital signature has been exposed. This signature protects the app from fake and malicious updates, so there is a risk that someone may try to release counterfeit versions under my name.
To completely eliminate any threats, I’ve decided to stop using the current signature and switch to a new one. Because of this, the app’s identifier will also change. You don’t need to delete the old app (but it will no longer receive updates) — the new one will install as a separate app and will need to be configured again.
Thank you for your understanding and attention to security.[1][2]
---------------
There aren't any new apk releases on GitHub yet. However, concerningly, the SmartTube website (which I won't link directly) still offers undated "Stable" and "Beta" downloads.
It sucks to deal with security breaches as an indie or solo dev, but I'll be waiting for a more detailed postmortem before assessing whether to install a future release... Hopefully one that details new security procedures to guard both the dev's key and the production build environment.
Factory resetting my Shield as a precaution, but nothing sensitive was really on there, and Android's security model did exactly what it was supposed to and limited the damage. When using a third party app like this, it's prudent to use it signed out or else with a purpose specific Google/YouTube account which is connected to nothing else critical.
[1]: https://github.com/yuliskov/SmartTube/releases/tag/notificat...