3 ms·

APKMirror is a great resource but there's no way they 'manually' review each APK that hits the site.

• johnday 7y ago
  I expect that they do so for the high profile apps, since the negative press from a compromised Facebook/Snapchat download would probably kill the site outright.
  • georgiecasey 7y ago
    but they discovered random 3rd party apps signing with the facebook key. apps with a package name like com.testmusicapp so to detect this manually, they'd have to be checking every single app! more likely, they've an automated system that detects new APKs signed with prominent keys.
    • johnday 7y ago
      Yeah, that's what I would expect - global automated testing, and specific manual testing. Although it's very possible that the thing you mentioned is a fluke and somebody decided to ask the question "We should probably keep all the Facebook apps definitely-safe, so which ones are signed with this key?"