RSS recommendations?

Novalissoide

Probably9857 did you try by taking them from github? I did that and the Play got Failure, both installed.

Probably9857

My Play version is from Play Store, so maybe that is the difference.

I did download the Play version from GitHub, and it said I already had the latest version installed (this was prior to installing the F-Droid version).

Dumdum

Probably9857 Both success in App Verifier

As in, the Internal Database Status shows Success?
Because I've just installed the Play Store version, and it shows Failure while the Fdroid shows Success just like Novalissoide.

Seems that while the two versions share the same signing key, the App Verifier database still bases Feeder on the Fdroid appID.

Probably9857

Dumdum

See my last reply. It seems App Verifier has the Play Store version signed by Google, and the F-Droid version from GitHub

Dumdum

Probably9857
I suppose it would make sense for the database to use the actual Play Store as the source for the Play Store signature, since it would be the expected way to install that version. At least that solves the confusion.

Novalissoide

FeederPlay, from
https://github.com/spacecowboy/Feeder/releases

com.nononsenseapps.feeder.play
C5:EE:FF:22:48:81:35:FF:C2:58:3C:3A:43:B0:53:A1:61:CA:86:98:62:96:1A:B8:53:4F:44:C7:5F:D5:7D:97
FAILURE

Probably9857

Novalissoide

From Play Store:
com.nononsenseapps.feeder.play
AC:75:28:54:1E:6F:FC:7D:AD:2C:C7:AA:52:51:12:31:93:C0:09:2C:5B:52:FC:26:62:9D:0F:73:76:81:9D:58

Novalissoide

Feeder, Sandboxed Google Play Store
com.nononsenseapps.feeder.play
AC:75:28:54:1E:6F:FC:7D:AD:2C:C7:AA:52:51:12:31:93:C0:09:2C:5B:52:FC:26:62:9D:0F:73:76:81:9D:58
SUCCESS

kaisernatron

Novalissoide Using the Github Play version, I tried to verify with the hash on the main GitHub page and it worked

SHA-256: C5:EE:FF:22:48:81:35:FF:C2:58:3C:3A:43:B0:53:A1:61:CA:86:98:62:96:1A:B8:53:4F:44:C7:5F:D5:7D:97. It didn't work at first because the copy button included "SHA-256:"

Novalissoide

Dumdum database to use the actual Play Store

But there is only one version that gets Appverifier 'FAILURE' , the FeederPlay, from Github.

Novalissoide

kaisernatron yes, but it wont be recognised by Appverifiers internal database, which has stored the Fdroid, and Play Store versions.

https://imgur.com/a/rqSdMv0

This picture shows the situation, failed internal db, but success matching with the clipboarded sign hash.

kaisernatron

Novalissoide I'm fine with Feeder since the hash has been verified, but the other suggestion ReadYou also shows Internal Database Status: Failure and this time there's only one version. I can't find the hash for it too, the one with colons and is in caps like this C5:EE:FF:22:48:81:35:FF:C2:58:3C:3A:43:B0:53:A1:61:CA:86:98:62:96:1A:B8:53:4F:44:C7:5F:D5:7D:97

Novalissoide

kaisernatron Internal Database Status: Failure and this time there's only one version.

https://imgur.com/a/1lFOxgj
This is the one from https://github.com/ReadYouApp/ReadYou/releases

But the Fdroid is a success in Appverifier
https://imgur.com/a/uSSb36J

kaisernatron

Novalissoide Maybe it's time to switch to F-Droid... not sure if it's still risky tho

Novalissoide

kaisernatron nonono, the take home-lesson here is not that F-droid is safer, only that the Appverifier has a really dated and limited internal database. I would like Appverifier with that database removed, then users would be forced into using the app and look up the signing hashes from the various sources, and check for correlations with others.

https://discuss.grapheneos.org/d/15368-lets-compare-hashes-for-apps-not-in-appverifiers-database/177

pamela85

I'm looking for a local and secure RSS app, too. But I've got a pretty big problem:
One of my feeds is https://www.chip.de/rss/rss_downloads.xml
The feed itself has only 10 posts - but the site generates some days >60 posts. And i don't use mobile data when i don't need it and i shut down the phone over night. So i will miss a lot of feeds. And because of that I'm currently using FeedMe with Inoreader.

« Previous Page