Thoughts on Obtainium and Aurora Store? (lemmy.ml)

submitted 2 months ago by Quail4789@lemmy.ml to c/privacy@lemmy.ml

3 comments fedilink hide all child comments

I've looked through Obtainium source code a while back and there seems to be no hash verification whatsoever. Looks too susceptible to supply chain attacks to me.

I don't like that Aurora Store sends a list of installed applications to Google and the only way to stop it is to blacklist.

Is there an option that combines multiple sources together like Obtainium but contains automatic hash verification for added security (I am aware updates are protected by Android)? Something I can use to download non-FOSS apps from a mirror but make sure it's the APK from the Play Store?

you are viewing a single comment's thread
view the rest of the comments

[-] Virkkunen@fedia.io 5 points 2 months ago

If you're really paranoid about it, you can download AppVerifier and have Obtainium automatically send the downloaded apk to it and verify the sums before installing

[-] Quail4789@lemmy.ml 3 points 2 months ago

that's still a manual process for most apps I've tried

this post was submitted on 16 Oct 2024

27 points (100.0% liked)

Privacy

32653 readers

417 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS