this post was submitted on 08 Sep 2024
57 points (96.7% liked)

Open Source

31197 readers
210 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
 

The same opensource app, downloadable on both stores but paid on playstore and free on fdroid. Is it legal and is it ethical? Why?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] -4 points 2 months ago (2 children)

True, but I think typically the Playstore version isn't always from the official maintainers and I'd consider it less trustworthy, even if free (unless the devs link to the playstore page on github/gitlab/codeberg/whatever).

[–] [email protected] 28 points 2 months ago

The examples I know are officially published by their orginial developers

[–] [email protected] 5 points 2 months ago (1 children)

the play store version isn't as trustworthy even if the original devs published it there, since google forced all developers a few years ago to hand over their signing keys. the signature is how you know the app wasn't modified by anyone, and that actually the developer released the apk

[–] [email protected] 3 points 2 months ago (2 children)

Wait what? Really? That's terrible. Just... why?

[–] [email protected] 1 points 2 months ago (1 children)

yeah. the reason is that they can get away with that.

this change was bundled with another one that was kind of good to have: building apps to an .aab file and making split apk's out of it.
but in this scheme the dev builds the .aab, and google makes the split apk's, and google needs your signing key to make the signed split APKs. the reason they need your formerly used signature's keys is because if they would have started signing apps with a new one, users who had your app already installed would have had to first uninstall the app and lose their data, because android has a security feature that does not allow an update that has a different signature.

of course, while at first it was an option, the play store has soon made it a requirement that you upload your apps as .aab files.
developers basically didn't have a choice, other than not releasing any more updates to the play store and letting google delete "outdated" apps when they want, like they'll have a sweep soon.

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)

Fuck Google, man. Split apks make it super difficult to find, extract and install modded apps.

[–] [email protected] 0 points 2 months ago (1 children)
[–] [email protected] 1 points 2 months ago

I so hope they get broken down, AND have to pay some outrageous fines before that, AND have to comply to some insane rules that restrict them hard. And then make the rules apply to all of Big Tech: Amazon, Apple, Microsoft, Meta, make them all suffer as they should, after the damage they've caused.