- cross-posted to:
- android@lemdro.id
- cross-posted to:
- android@lemdro.id
qBitController is a free and open-source app for controlling qBittorrent from an Android device.
qBitController is a free and open-source app for controlling qBittorrent from an Android device.
Thats not a random apk
I understand the developer may be known and trusted
But I do not have the expertise to do my own thorough code review
If that’s of your concern, you can’t download the play store version either. It is the same app, has the same signature.
as if the play store only contains safe APKs right?
Excuse my ignorance and correct me if I’m wrong
But does the play store not do some sort of scanning itself?
Potentially, but that doesn’t really matter, as you can match the signatures of the two versions and see that they are the same. You cannot fake that and have one version have different code, it’s not possible.
Thanks for the insight :)
Even worse. Many apps have google signature instead of the developers. They upload their key and give it to google. Horrible practice. Nowadays, fdroid gravitates towards reproducible builds with the dev’s own signature and google is going the other way round. Gravitating towards an unsafe “best practice” …
What does Google play do to remediate it?
They do basic checking for known malware.