All apk install functions will soon be removed

Support for Android version of Total Commander

Moderators: white, Hacker, petermad, Stefan2

seremek
Junior Member
Junior Member
Posts: 2
Joined: 2022-10-01, 13:45 UTC

Re: All apk install functions will soon be removed

Post by *seremek »

Fist of all - thank you for all your work on Total Commander.
I'm not active user of the app for Android now but I really appreciate your decision about releasing apk with unrestricted version.

Would it be possible to put in FAQ / Installation page short information how to verify Total Commander apk file signature no matter if it was downloaded&installed from your page, google play or any other repository?

I would like to have the same level of trust and security to your application regardless installation channel.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: All apk install functions will soon be removed

Post by *ghisler(Author) »

The best method to ensure that it's authentic is to first install the Play Store version, and then the download version (with any installer): If the app signatures differ, Android will refuse to install the update.
Author of Total Commander
https://www.ghisler.com
seremek
Junior Member
Junior Member
Posts: 2
Joined: 2022-10-01, 13:45 UTC

Re: All apk install functions will soon be removed

Post by *seremek »

Some people are not using neither Google Play nor gms services in Android. Verifying application via Play Store is not secure because i cannot check or review incoming application package contents prior installation and abort installation if there is something suspicious.
It also requires extra installer with excess permissions. For example f-droid team see no problem with publishing their public keys to verify apps (https://f-droid.org/en/docs/Release_Channels_and_Signing_Keys/)

I understand your signing keys are the same for both full&GPlay version.Will you participate in Play App Sigining and upload your private keys to google infrastructure?
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: All apk install functions will soon be removed

Post by *ghisler(Author) »

You can verify the signature online here:
https://apkpure.com/apk-signature-verification
It will tell you "APK is the unmodified official version.". The signature (digest) of all my apps displayed there should be
4b54d786e2e5a0ac37440ea8103a900be153d6ca
Will you participate in Play App Sigining and upload your private keys to google infrastructure?
No, one thing I learned early is to NEVER put private keys or passwords in a cloud. Every cloud can be hacked, it's only a question of time.
Author of Total Commander
https://www.ghisler.com
Luk164
Junior Member
Junior Member
Posts: 2
Joined: 2022-10-13, 18:59 UTC

Re: All apk install functions will soon be removed

Post by *Luk164 »

Hi everyone, I read the discussion and I wanted to ask why cant we just move the installation functionality into a plugin? It would technically remove it from the main app while still allowing installing from google play. The only annoying thing would be having to install the plugin manually, but still better that having to manually install the entire app and lose automatic updates in the process.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: All apk install functions will soon be removed

Post by *ghisler(Author) »

Not a plugin, but I moved it to a separate app. Have a look at the top post.
Author of Total Commander
https://www.ghisler.com
gpinpin
Junior Member
Junior Member
Posts: 4
Joined: 2022-10-31, 09:44 UTC

Re: All apk install functions will soon be removed

Post by *gpinpin »

ghisler(Author) wrote: 2022-10-03, 07:58 UTC The best method to ensure that it's authentic is to first install the Play Store version, and then the download version (with any installer): If the app signatures differ, Android will refuse to install the update.
Hello
Is it for this reason that I can install a beta version (the latest) and not the 333?
TC sur A52s 5G et sur tous mes anciens téléphones
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: All apk install functions will soon be removed

Post by *ghisler(Author) »

The beta is newer, so Android will refuse to go back to the 333 because it's older. You can only override this when installing from a PC/Mac with adb, use parameter -d for downgrade:
adb install -r -d apkname.apk
Author of Total Commander
https://www.ghisler.com
Zygus
Junior Member
Junior Member
Posts: 37
Joined: 2013-02-23, 17:51 UTC

Re: All apk install functions will soon be removed

Post by *Zygus »

It is weird because file managers were allowed to provide sideloading from apk, and Google Chrome which is not file manager at all is allowed to download apks from third parties and sideload them.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: All apk install functions will soon be removed

Post by *ghisler(Author) »

It was decided by a Google AI, and support was not willing to explain what's wrong.
Author of Total Commander
https://www.ghisler.com
Hurdet
Power Member
Power Member
Posts: 620
Joined: 2003-05-10, 18:02 UTC

Re: All apk install functions will soon be removed

Post by *Hurdet »

Do it have a rss or txt link to check update programmatically?
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: All apk install functions will soon be removed

Post by *ghisler(Author) »

No, please install F-Droid and add my repository to get automatic updates:
https://www.ghisler.com/fdroid.htm
Author of Total Commander
https://www.ghisler.com
Hurdet
Power Member
Power Member
Posts: 620
Joined: 2003-05-10, 18:02 UTC

Re: All apk install functions will soon be removed

Post by *Hurdet »

Why last version in about config report 4.2d instead of 4.2.
It is confusable.
User avatar
white
Power Member
Power Member
Posts: 4594
Joined: 2003-11-19, 08:16 UTC
Location: Netherlands

Re: All apk install functions will soon be removed

Post by *white »

Hurdet wrote: 2023-08-09, 15:28 UTC Why last version in about config report 4.2d instead of 4.2.
d stands for Download version, which is the full TC version with included APK installer.
User avatar
blacky
Senior Member
Senior Member
Posts: 311
Joined: 2003-02-07, 16:58 UTC
Location: was das/whot's dath ?

Re: All apk install functions will soon be removed

Post by *blacky »

ghisler(Author) wrote: 2023-08-09, 14:09 UTC No, please install F-Droid and add my repository to get automatic updates:
https://www.ghisler.com/fdroid.htm
hey, geil .. hey rewl !

jetzt erst gesehen, solltest du auf die TC-Androidseite klatchen..so in richtung :

hey, before you download anything else, klick the Homepage from TC-Android,
hey Chris, could you not build up a tc-android.org and then an htaccess on it to the Android page,
then, under the Image where could klick,
an text about F-droid, and a F-droid installer link (then need i not ever add the newest fdroid to the synced files from my self *bG* hrhr)
and under it, the link for the TC-fdroid-Repo :)
then is all at one page..

then is all together.. and the easyest way for android, with an own tc-android domain.. :mrgreen:

best
Blacky
Meine Blackysgate.de/net
Ma' Personal licence : already one. Hab auch eine
Mein Computer : Einer/once ??? bahh, Rz/Data Centre !
Kitchen, Liv.room, TV, Schlafz.. Sch...
BS/OS: Win3.1/7, Fedora a. other, Reactos
Post Reply