News for hackers. Stuff that matters.
Re:Fortnite seems to have been removed from the Play Store a... by Wowfunhappy on Thursday August 13, 2020 @07:46PM (#24151321)
> that suggests it's less secure to use any app store but the Play Store.

The suggestion is usually correct, though. Google does a terrible job of vetting Play Store apps, but they do still have some automated safety checks, and they kick out known malware once it's found.

If you allow sideloading, you give up all of that. It's still perfectly safe if you trust what you install, but you have to make that assessment. Google can't save you.

This is exactly how I wish iOS worked. It's also basically how the Mac works nowadays, except replace "App Store" with "Apple notary service."

How would you suggest Google correctly communicate the risk?

Re:Fortnite seems to have been removed from the Play Store a... by ocdtrekkie on Thursday August 13, 2020 @09:44PM (#24152247)
Installing an app from F-Droid is drastically safer than installing an app from the Play Store though.
Re:Fortnite seems to have been removed from the Play Store a... by ithkuil on Thursday August 13, 2020 @11:22PM (#24152913)
Could it be because a niche is not such an interesting attack vector?
Re:Fortnite seems to have been removed from the Play Store a... by ocdtrekkie on Thursday August 13, 2020 @11:58PM (#24153166)
Maybe a little, but more importantly, all apps on F-Droid are open source, and verifibly built from said source. It's very hard to hide malicious activity on it, whereas duping the Play Store content moderators is like taking candy from a baby.
Re:Fortnite seems to have been removed from the Play Store a... by distances on Friday August 14, 2020 @07:56AM (#24156704)
For a small apps there's nothing checking against intentional malicious activity. Sure it'd be there in plain sight, but it's pretty unlikely really that anyone would read the source code of some random single person project.
Re:Fortnite seems to have been removed from the Play Store a... by Wowfunhappy on Friday August 14, 2020 @09:22AM (#24157575)
Google doesn't know whether you're installing F-Droid or Totally-Free-Money.apk.