Originally I’ve download the signal app through playstore, but often it also get updates from Droid-ify(Fdroid client). Today its weird and I got this . Explain to me this.

On the Droid-ify the signal app is provided by: org.thoughtcrimes.securesms

  • Blizzard@lemmy.zip
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    60
    ·
    2 years ago

    Didn’t notice the “droid-ify” part, whatever that is. Install apps from trusted sources like F-Droid or dev’s website and you don’t need Google to scan your phone and tell you what you can or cannot install.

    • mapletree@sh.itjust.works
      link
      fedilink
      arrow-up
      43
      arrow-down
      1
      ·
      edit-2
      2 years ago

      Droid-ify is just a different client for F-Droid. It should be safe and uses the same repositories

    • Nia [she/her]@beehaw.org
      link
      fedilink
      arrow-up
      16
      ·
      edit-2
      2 years ago

      Droid-ify is an F-droid frontend, that is also in F-droids repo as an installable app so it’s safe, in this case one of the F-droid repos OP has is actually malicious and is installing a modified version of Signal, the package name is wrong org.thoughtcrimes.securesms, it should be thoughtcrime without the S.

      I think Play Protect is intrusive, but this time it actually tried to protect OP from a malicious Signal clone.

    • ReversalHatchery@beehaw.org
      link
      fedilink
      arrow-up
      14
      ·
      2 years ago

      Droid-ify is an f-droid client, it’s on f-droid too.

      The question is, what repo did that apk come from. But I have a feeling OP will not bother with checking it