3 ms·
I know of many such stores. Usually they are proxies: They download the app from the Google store, you download it from the proxy. The question is, how do you k
by forapurpose 9y ago
I know of many such stores. Usually they are proxies: They download the app from the Google store, you download it from the proxy. The question is, how do you know they haven't inserted malware? It seems like a very obvious vector for attack. You could authenticate signatures or hashes, but where do you find the authoritative signature/hash?
For those interested in taking a shot at using these services, here are a couple of the more credible ones I've run into in the last couple years (I haven't used them in at least 6 months, so possibly their status has changed). Use at your own risk!:
- APK Downloader: By someone on XDA-forums, a leading Android dev community. It comes in several versions and forks by other XDA members, and for several platforms. I don't have time to sort them out now, sorry. Beware of malware-infected hosted implementations.
http://codekiem.com/2014/08/07/official-apk-downloader-v2-download-apk-files-from-google-play-store-to-pc http://codekiem.com/2014/08/07/official-apk-downloader-v2-do... / http://forum.xda-developers.com/showthread.php?t=1515021 http://forum.xda-developers.com/showthread.php?t=1515021
http://forum.xda-developers.com/showthread.php?t=1809458 http://forum.xda-developers.com/showthread.php?t=1809458
https://github.com/Lekensteyn/apk-downloader https://github.com/Lekensteyn/apk-downloader
- Racoon: Desktop OS client for Play Store (along with its Github and XDA links)
http://raccoon.onyxbits.de http://raccoon.onyxbits.de / https://github.com/onyxbits/Raccoon https://github.com/onyxbits/Raccoon / https://forum.xda-developers.com/showthread.php?t=2772436 https://forum.xda-developers.com/showthread.php?t=2772436
- _1tan 9y agoYalp downloads directly from Google Play using included "fake" credentials (you can also supply your own).
- forapurpose 9y ago> Yalp downloads directly from Google Play ... How do you know? Why do you trust it?
- LukeShu 9y agoBecause it's a FOSS application, and you can read the source and verify that the Yalp app is indeed talking directly to Google Play servers?
- LukeShu 9y agoYalp is a FOSS Android app available from F-droid. The Yalp app on your phone talks directly to the Google Play servers.
- forapurpose 9y agoThanks. That helps! For those who want to know more; here's what I found: https://github.com/yeriomin/YalpStore https://github.com/yeriomin/YalpStore - The readme is a great place to start. On F-Droid: https://f-droid.org/packages/com.github.yeriomin.yalpstore/ https://f-droid.org/packages/com.github.yeriomin.yalpstore/ EDIT: It looks great!