F-Droid

7418 readers

2 users here now

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

Website | GitLab | Mastodon

Matrix space | forum | IRC

founded 3 years ago

MODERATORS

[email protected]

App installed from F-Droid and updated via Playstore? (feddit.de)

submitted 10 months ago by [email protected] to c/[email protected]

7 comments fedilink hide all child comments

I have installed Davx5 from F-Droid, from IzzyOnDroid Repo. Today I have checked for updates with the Google playstore and the App was updated to the playstore variant. I thought this isn't possible? What's going on here?

top 7 comments

sorted by: hot top controversial new old

[–] [email protected] 26 points 10 months ago (2 children)

The apps on IzzyOnDroid are built by the original developers and likely signed with the same key as the version on Google Play. As a result, Google is able to update them. Apps in the official F-Droid repository are signed by F-Droid. As a result, the keys are different and won't be updated by the version from Google.

[–] [email protected] 10 points 10 months ago* (last edited 3 months ago)

It can also happen with apps from the main repo. If the app is reproducible (about 5% so far, most new apps) then F-Droid will use the developer signature.

[–] [email protected] 4 points 10 months ago

This makes sense. Yes, I have paid in the playstore for this app (and I would do it again and again). But if I understand it correctly this would also mean, I could download their v4.3.8-ose from the official GitHub repo for free, and it would be updated automatically from Playstore to v4.3.8-gplay version (which is not free). Strange.

But this app is worth every penny.

[–] [email protected] 5 points 10 months ago (1 children)

Izzydroid repo is using the dev signature, play store has an option to use the dev signature instead of Google signature. Same signature = update allowed

[–] [email protected] 2 points 10 months ago

TIL there's an option to have Google sign an app. Seems a bit sketchy to me.

[–] [email protected] 3 points 10 months ago

All of my apps that are downloaded not from the Aurora store can be updated via Aurora. I have to blacklist them in Aurora so I don't accidentally update them there. Many applications offer their "pro" versions for free in fdroid or just on Github and it's up to you to choose to donate or not. OSM And~, Retro Music, Lemuroid, Notesnook, Voyager, Quillpad, FUTO Voice Input are all from Fdroid and I've needed to blacklist them. Even BlueWallet downloaded via Obtanium from Github is recognized in Aurora.

[–] [email protected] 1 points 10 months ago

They both have the same signing keys. The F-Droid repo uses the F-Droid signing keys unless the build is reproducible.