News for hackers. Stuff that matters.

A comment on Aptoide wins court battle against Google in landmark case. Parent comment

Re:Aptoide wins court battle against Google in landmark case by opencl on Wednesday October 24, 2018 @10:31AM (#18292709)
It is very easy to verify these apps have not been modified if you also have access to a known good copy of the same app. Install known good copy -> install suspect APK as upgrade -> signature check performed on upgrade verifies that it was signed with the same key as the old version, so if the upgrade succeeds there has been no modification.
[ Parent | on HN ]
Re:Aptoide wins court battle against Google in landmark case by kop316 on Wednesday October 24, 2018 @03:32PM (#18295608)
Actually Google is adding a way to verify it came from them:

https://android-developers.googleblog.com/2018/06/google-pla...

They specifically cite being able to do this peer to peer.

[ Parent | on HN ]
Re:Aptoide wins court battle against Google in landmark case by ihuman on Wednesday October 24, 2018 @10:41AM (#18292792)
How do you get access to a known good copy of the app?
[ Parent | on HN ]
Re:Aptoide wins court battle against Google in landmark case by liotier on Wednesday October 24, 2018 @10:56AM (#18292936)
Especially since the normal use of an APK intermediary is that one does not have access to a known good source such as Google Play
[ Parent | on HN ]