Obtainium

Obtainium is a tool that allows you to get and update Android apps directly from the developer in an automated way.

It supports apps that are provided as .apk by the devs on Github and many other sites like Gitlab, Codeberg and even Signal and Telegram official websites.

This allows the fastest possible updates directly after release and makes additional app stores for many FOSS apps unnecessary.

https://github.com/ImranR98/Obtainium

Reply to this note

Please Login to reply.

Discussion

Doesn't sound safe at all.

I trust this more than Google spy on everything you do and sell your personal info to anyone and everyone Playstore.

I think its pretty safe. If you install the first apk manualy direcrly from the dev it will have the devs signature. In case Obtainium would tamper with the apk in any way, Android wouldn't install it because signatures differ. What are your concerns?

The first thing that comes to mind is telemetry.

True, but you can check this with tools like TrackerControl.

It's good to have it as an option when the app is not yet on nostr:npub1vyw6twg3kwef27wdffsxawmvcycy407cehx3kj8xn0v0v5nwrgps6plpqe. Problem is many #foss #developers don't know or care about avoiding #privacy violating #analytics and other #antifeatures in their apps and that's why we need other people in the community to verify their apps.

Obtainium is awesome although fdroid's curation and oversight should not be entirely discarded:

nostr:nevent1qqsge4deghv5vwrypesjrqvp468px8knynrlgyx3ud8csckl8k05h4syv0uc2

Obtainium works fine but project haven't received updates for several months now on GitHub, not that its bad by default but its reconforting to see some movement from time to time from devs.

New release today!

No way, not even going to check it...

Actually thats right, there is some betas going on there 🫠

Since this is a good app and well developed it caries some security considerations to take in consideration

For example a mistake update can lead you to lose important data on your device besides what app is getting the bad update the developer can make a mistake for example or the developer github account can be hacked and the bad actors can serve a malicious apk targing with this way millions of devices include yours

You need to think carefully do you need so urgent updates for your apps? Do you need one more app installed?

Or you install only what you are sure that is safe?