3 ms·

"Yalp Store" allows you to install apps from google store without google account.

by slezyr 9y ago

forapurpose 9y ago
I know of many such stores. Usually they are proxies: They download the app from the Google store, you download it from the proxy. The question is, how do you know they haven't inserted malware? It seems like a very obvious vector for attack. You could authenticate signatures or hashes, but where do you find the authoritative signature/hash? For those interested in taking a shot at using these services, here are a couple of the more credible ones I've run into in the last couple years (I haven't used them in at least 6 months, so possibly their status has changed). Use at your own risk!: - APK Downloader: By someone on XDA-forums, a leading Android dev community. It comes in several versions and forks by other XDA members, and for several platforms. I don't have time to sort them out now, sorry. Beware of malware-infected hosted implementations. http://codekiem.com/2014/08/07/official-apk-downloader-v2-download-apk-files-from-google-play-store-to-pc http://codekiem.com/2014/08/07/official-apk-downloader-v2-do... / http://forum.xda-developers.com/showthread.php?t=1515021 http://forum.xda-developers.com/showthread.php?t=1515021 http://forum.xda-developers.com/showthread.php?t=1809458 http://forum.xda-developers.com/showthread.php?t=1809458 https://github.com/Lekensteyn/apk-downloader https://github.com/Lekensteyn/apk-downloader - Racoon: Desktop OS client for Play Store (along with its Github and XDA links) http://raccoon.onyxbits.de http://raccoon.onyxbits.de / https://github.com/onyxbits/Raccoon https://github.com/onyxbits/Raccoon / https://forum.xda-developers.com/showthread.php?t=2772436 https://forum.xda-developers.com/showthread.php?t=2772436
- _1tan 9y ago
  Yalp downloads directly from Google Play using included "fake" credentials (you can also supply your own).
  - forapurpose 9y ago
    > Yalp downloads directly from Google Play ... How do you know? Why do you trust it?
    - LukeShu 9y ago
      Because it's a FOSS application, and you can read the source and verify that the Yalp app is indeed talking directly to Google Play servers?
- LukeShu 9y ago
  Yalp is a FOSS Android app available from F-droid. The Yalp app on your phone talks directly to the Google Play servers.
  - forapurpose 9y ago
    Thanks. That helps! For those who want to know more; here's what I found: https://github.com/yeriomin/YalpStore https://github.com/yeriomin/YalpStore - The readme is a great place to start. On F-Droid: https://f-droid.org/packages/com.github.yeriomin.yalpstore/ https://f-droid.org/packages/com.github.yeriomin.yalpstore/ EDIT: It looks great!
ATsch 9y ago
I think what OP meant was having to make an account inside the app
yellowapple 9y ago
Not sure if that's really relevant to the quality of the apps themselves. Since everything (at least by default) through F-Droid is FOSS, there is a significant lack of ads and other misfeatures. Apps that depend on an account with a non-free third-party service are clearly marked as such. Most apps aren't foolishly tied at the hip to Google Play Services. Malware is non-existent.

"Yalp Store" allows you to install apps from google store without google account.

by slezyr 9y ago

"Yalp Store" allows you to install apps from google store without google account.

I know of many such stores. Usually they are proxies: They download the app from the Google store, you download it from the proxy. The question is, how do you know they haven't inserted malware? It seems like a very obvious vector for attack. You could authenticate signatures or hashes, but where do you find the authoritative signature/hash? For those interested in taking a shot at using these services, here are a couple of the more credible ones I've run into in the last couple years (I haven't used them in at least 6 months, so possibly their status has changed). Use at your own risk!: - APK Downloader: By someone on XDA-forums, a leading Android dev community. It comes in several versions and forks by other XDA members, and for several platforms. I don't have time to sort them out now, sorry. Beware of malware-infected hosted implementations. http://codekiem.com/2014/08/07/official-apk-downloader-v2-download-apk-files-from-google-play-store-to-pc http://codekiem.com/2014/08/07/official-apk-downloader-v2-do... / http://forum.xda-developers.com/showthread.php?t=1515021 http://forum.xda-developers.com/showthread.php?t=1515021 http://forum.xda-developers.com/showthread.php?t=1809458 http://forum.xda-developers.com/showthread.php?t=1809458 https://github.com/Lekensteyn/apk-downloader https://github.com/Lekensteyn/apk-downloader - Racoon: Desktop OS client for Play Store (along with its Github and XDA links) http://raccoon.onyxbits.de http://raccoon.onyxbits.de / https://github.com/onyxbits/Raccoon https://github.com/onyxbits/Raccoon / https://forum.xda-developers.com/showthread.php?t=2772436 https://forum.xda-developers.com/showthread.php?t=2772436

_1tan 9y ago
Yalp downloads directly from Google Play using included "fake" credentials (you can also supply your own).
- forapurpose 9y ago
  > Yalp downloads directly from Google Play ... How do you know? Why do you trust it?
  - LukeShu 9y ago
    Because it's a FOSS application, and you can read the source and verify that the Yalp app is indeed talking directly to Google Play servers?
LukeShu 9y ago
Yalp is a FOSS Android app available from F-droid. The Yalp app on your phone talks directly to the Google Play servers.
- forapurpose 9y ago
  Thanks. That helps! For those who want to know more; here's what I found: https://github.com/yeriomin/YalpStore https://github.com/yeriomin/YalpStore - The readme is a great place to start. On F-Droid: https://f-droid.org/packages/com.github.yeriomin.yalpstore/ https://f-droid.org/packages/com.github.yeriomin.yalpstore/ EDIT: It looks great!

ATsch 9y ago

I think what OP meant was having to make an account inside the app

yellowapple 9y ago

Not sure if that's really relevant to the quality of the apps themselves. Since everything (at least by default) through F-Droid is FOSS, there is a significant lack of ads and other misfeatures. Apps that depend on an account with a non-free third-party service are clearly marked as such. Most apps aren't foolishly tied at the hip to Google Play Services. Malware is non-existent.