search

solkin / appteka-android

💊 Appteka is an alternative store for Android
https://appteka.store
GNU General Public License v3.0
353 stars 23 forks source link

Inclusion in F-Droid #4

Closed Poussinou closed 3 years ago

Poussinou commented 6 years ago

Hi,

Since this app is now officially GNU GPLv3licensed, are you considering the fact to add it to F-Droid? There is a strong community behind, that do not use Google Play nor anything else, except F-Droid.

You can find some documentation here.

Otherwise, if you don't want to work on the inclusion of this app by yourself, would it be ok for you if someone else do it for you?

solkin commented 6 years ago

Hi! Of course, I consider placing AppSend to the F-Droid. And it will be ok if someone else will publish AppSend to F-Droid.

solkin commented 5 years ago

Closing issue for now.

IzzySoft commented 5 years ago

@solkin it seems you include Flurry Analytics with your app. Afraid that would not be acceptable at F-Droid. Could you provide a build flavor that comes without that?

solkin commented 5 years ago

@IzzySoft It seems, I can totally remove Flurry in the nearest release due to small functionality and big size.

IzzySoft commented 5 years ago

Yes, please do so (and let me know when that release is out), so I can update the issue at F-Droid and it can be picked up to build!

IzzySoft commented 5 years ago

P.S.: and don't forget to tag your releases 😉 That makes it easier for F-Droid to know which commit to build – and to detect updates when they're available.

IzzySoft commented 5 years ago

@solkin may I suggest to reopen this issue, as the problems discussed are still unsolved? There was no new release yet, there still are no tags, etc. Thanks. And while being on it: Are you still planning to solve them? Because else we've got to close the inclusion request on our end (disclosure: I'm one of the F-Droid maintainers).

solkin commented 5 years ago

@IzzySoft sorry for such delay. I'm working on application backend for now and client-side update is delaying. Application update will be prepared in a month, I think. And there Flurry will be removed from project.

IzzySoft commented 5 years ago

Thanks for the feedback, @solkin! Good to know. Still I'd suggest to leave this issue open until solved, so it can be found easier.

solkin commented 5 years ago

Okay, I'll reopen this issue until it will be solved.

IzzySoft commented 4 years ago

@solkin looks like you were able to get rid of Flurry, congrats! Any news on the tags?

solkin commented 4 years ago

@IzzySoft FlurryAnalytics already removed: https://github.com/solkin/appteka-android/commit/2c5bb43444c852a737eb857a20e9e082ed84fd01 For now, I'm preparing release with lots of changes.

IzzySoft commented 4 years ago

Great news that, thanks! Please update us here again when the release is ready (especially, when the tag is there), so we can help you getting it into the F-Droid catalog.

solkin commented 4 years ago

@IzzySoft Hi! Finally, release is ready! https://github.com/solkin/appteka-android/releases/tag/v5.0

IzzySoft commented 4 years ago

Thanks Igor! I've just prepared its metadata, so it should show up in my repo with tomorrow's sync here. Note it doesn't qualify for f-droid.org due to Hockey (F-Droid doesn't permit proprietary services). Also for privacy reasons, you might consider a "fully f/loss build flavor". Hockey is known to be one of the more invasive trackers. Otherwise I had offered you to help with a listing there (which I still do if you have such a flavor)…

If you need a "compliant" analytics package, e.g. ACRA would qualify.

PS: just wondering if Sberbank really qualifies as your homepage? Are you really THE owner? Don't get me wrong, it's not meant as critics but an honest question (because of the corresponding metadata field, AuthorWebsite). If the answer is yes: molodez, and I'll shut up immediately :wink:

vdbhb59 commented 4 years ago

@IzzySoft Maybe I am wrong, but he stores modded apps and pro version, pirated apps probably on his store (LuckyPatcher, UTorrent Pro, etc). If you open his webpage (https://appteka.store/) and his telegram chat you will know. Sharing few snaps and details here. 857421663_283930 500001800168_37204 http://t.me/appsend_store Owner: https://t.me/zibuhoker Hybrid analysis of the latest apk as per his website.. https://www.hybrid-analysis.com/sample/4e1eb1d085871f2fb363f6e7670f0388d2ed89a1d7b44edb113095c962c03948/5e4ffd6146c06c1e0e31ff75

One more thing.. His site IP is registered in UK, his keystore is signed in Moscow.. Maybe this point is nothing, but just thought of sharing in case.

Do not report or block me "owner" like Nekogram developer did when confronted about him stealing user data and app filled with analytics. I am just another person trying to show if anything is wrong and not against anyone in particular. :+1:

vdbhb59 commented 4 years ago

Screenshot_20200222-001935 Screenshot_20200222-002031 Few more snaps showing pro apps, LP installer available on the app. I installed via FDroid just to take snaps. Also, Izzy one still shows: Can track and report one's activities..

IzzySoft commented 4 years ago

Thanks for sharing, @vdbhb59 – maybe that should be at least pointed out somehow in the description. @solkin would you suggest some disclaimer? Could you explain the content in a few words? As @vdbhb59 pointed out: no blaming here, we're just seeking clarification.

vdbhb59 commented 4 years ago

Thanks for sharing, @vdbhb59 – maybe that should be at least pointed out somehow in the description. @solkin would you suggest some disclaimer? Could you explain the content in a few words? As @vdbhb59 pointed out: no blaming here, we're just seeking clarification.

Welcome. True, just trying to seek clarification. The only reason I mentioned with snaps is, Nekogram developer keeps blocking anyone who seeks or asks. They keep deleting issues as well, the moment people raise it. Seeing how @solkin has been easy on speaking openly, so good on that part. :)

solkin commented 4 years ago

@IzzySoft @ vdbhb59 It's not a secret, that Appteka is an alternative apps store. Users can freely exchange with apps. There is some moderators, that trying to check uploads for issues and malware. Before uploading, every user accept this disclaimer:

Important! By clicking "Yes" you confirm that:

  1. You do not violate the licenses of applications uploaded to the Appteka store.
  2. This software does not violate copyright and applicable laws.
  3. The owner of the appsend.store is not responsible for the uploaded software.

Before downloading, every user accepts another disclaimer:

Submitted applications in this cloud are uploaded by Appteka users. The author is not responsible for the quality of the content provided. By clicking "Yes" you accept this condition.

I have no resources and wishes to moderate every program. It's just cloud for Android apps exchange, like any forum, but more user-friendly.

If you think it's not appliable for F-Droid - no problems, just remove it. Maybe, you interest in AppSend https://github.com/solkin/appsend-android - this is Android apps management tool, a "father" of Appteka. This topic was started when Appteka was called AppSend and has no lots of cloud functionality.

solkin commented 2 years ago

@IzzySoft can you please update Appteka 6.0 release? Current release on F-Droid: https://apt.izzysoft.de/fdroid/index/apk/com.tomclaw.appsend New release: https://github.com/solkin/appteka-android/releases/tag/v6.0

IzzySoft commented 2 years ago

It's set to auto-update, but I've triggered it manually now as due to no releases for more than a year it's on a weekly check instead of the usual daily one, and hence would only be due to be checked again next Sunday night – so you missed the last check by a few hours only :wink: Should you expect more frequent releases, I can put it back to the daily check, just let me know then.

PS: before you ask, v6.0 will show up with the next sync around 19:00 UTC today. Thanks for the note!

solkin commented 2 years ago

@IzzySoft Thank you for reply! I think, there is no need in daily checking. But as I see, app is not updated in F-Droid yet https://apt.izzysoft.de/fdroid/index/apk/com.tomclaw.appsend

IzzySoft commented 2 years ago

Funny. When I follow the link, it says it was updated yesterday to version 6.0. Do I miss something? v6.0 is also what your latest tag here says. When did you look? About an hour before your last comment here? Then you might have been minutes too early. Database updates a few minutes past 19:00 UTC; the index itself is usually updated around 18:45 UTC.

solkin commented 2 years ago

@IzzySoft Thanks, for now, application is updated.

Deerp1976 commented 2 years ago

@solkin please see this report regarding an app on your app store called Vmos Pro on Virus Total which has 10 malicious reports out of 59 scanned. I have spoken to @IzzySoft about this and posted the Virus Total report on one of his Gitlab issue links - https://www.virustotal.com/gui/file/4a15c3c2eb70aa31ec1e1ffd34d9625c17399465196d4fa1b45904b3ed363a1a/details

https://gitlab.com/IzzyOnDroid/repo/-/issues/235#note_832961408

https://appteka.store/app/c19r52975

IzzySoft commented 2 years ago

Might be a good idea to have uploads scanned by VT automatically, and quarantine APKs if there are e.g. 5 or more hits (or at least show the number of hits with the app description). It's not that difficult (I'm doing that for my repo), and there are multiple libraries available for integration. You will need one supporting v3 (as v2 is limited to 32M per file in the free version); my own library (php-virustotal) is v2 but uses v3 for just that part, in case PHP is an option for you.

solkin commented 2 years ago

@IzzySoft I have an idea to add automatic virus checking on backend. My backend is not PHP, it is GoLang microservice architecture in Docker containers. So, I am planning to add ClamAV or another AV software in Docker container for checking uploaded apk files for issues.

IzzySoft commented 2 years ago

The page I linked to has 3 Go libraries for VT (API 2.0, so a 32MB size limit for uploads with the free tier) and one for API 3.0 (no such size limit). Using VT would bring you about 60 AV/malware engines at once. Exodus has an API interface as well if you wish to check for trackers.