News for hackers. Stuff that matters.
Re:Effectively Using Android Without Google Play Services wi... by voltagex_ on Sunday February 12, 2017 @09:20PM (#13632683)
No idea what Yalp is doing with your email here: https://github.com/yeriomin/YalpStore/blob/23503d639034d68b8...

I find Android code really hard to read - there's so many levels of indirection here I can't find where it's actually calling whatever.google.com to grab the APK

Re:Effectively Using Android Without Google Play Services wi... by jay-anderson on Monday February 13, 2017 @01:25AM (#13633488)
This particular code looks fairly straightforward (could definitely be clearer). It's building a url and including the email as a path segment. What the remote service (http://tokendispenser-yeriomin.rhcloud.com/) is doing with that email is harder to determine.
Re:Effectively Using Android Without Google Play Services wi... by problems on Monday February 13, 2017 @08:16AM (#13634958)
That part is open source too: https://github.com/yeriomin/token-dispenser

That said, if you're sketched out by it, don't use it on a Google account with any data on it. Just make a new empty account for apk downloading.

Re:Effectively Using Android Without Google Play Services wi... by voltagex_ on Tuesday February 14, 2017 @12:38AM (#13641431)
"Stores email-password pairs, gives out Google Play Store tokens"

I couldn't tell if it was encrypting the password but even if it was... yuck!