ismartcoding / plain-app

PlainApp is an open-source application that allows you to manage your phone through a web browser. Access files, videos, music, contacts, sms, calls, and more from your desktop using a secure, easy to use web interface!
https://docs.plain.icu
GNU Affero General Public License v3.0
2.49k stars 128 forks source link

Google Play Protect flagging app as harmful #191

Open coderkei opened 2 months ago

coderkei commented 2 months ago

Describe the bug Google play protect is flagging this app as harmful

To Reproduce Steps to reproduce the behavior:

  1. Install or update the app directly from github releases with play protect enabled.
  2. The message will appear. This will also show as a notification.

Expected behavior For this to not occur, presumably its a false positive but still a concern

Screenshots Screenshot_20240701_225538_Google Play Store

Desktop (please complete the following information):

Smartphone (please complete the following information):

Additional context Any idea why its being flagged? I assume its a false positive. Not sure if the F-Droid build is affected as this was with the github release build.

ismartcoding commented 2 months ago

The issue was resolved after rebuilding the APK. (root cause is still unknown)

Possible reason:

Obfuscation: Heavy obfuscation of the code can sometimes trigger Play Protect, as it might be seen as an attempt to hide malicious behavior.

ismartcoding commented 2 months ago

I believe Google Play Protect utilizes results from multiple file scanning platforms. It's absurd that some file scanning platforms label apps as malicious based solely on the permissions they request.

image

image

torbato commented 2 months ago

So if we are using the GitHub release version we can just ignore the flagging? I tried uninstalling and reinstalling multiple times but the bug is still present. I would like to be able to use the latest version since the one packaged for f-droid is older. I hope Google will fix their problems.

ismartcoding commented 2 months ago

Version 1.3.4 is identical to 1.3.3; the only change made was an increase in version number to test Google Protect.