• Off Topic

  • AURORA STORE: App Update Notification

UPDATE: More Good Mews ?

So... I just tried searching for an app in A.S. and it worked 😯

I've checked and my A.S. version is actually 4.2.5.(47) Not sure if it always was or if the
x.x.x.47 is new from my fresh install yesterday for testing the P8P...

Will it keep working? Is it fixed? I guess we will find out...

user
Hmmm... is your version now allowing app searches to work again

  • user replied to this.

      user
      Cool... I didn't know... hadn't seen anyone comment and mine hadn't updated for some reason.

        Question, is there really any point in using Aurora Store instead of the Play store on GraphenOS, in terms of tracking and privacy, or does it really make no difference?

          • [deleted]

          • Post #9

          Stewart aurora store does not pin TLS certificates. which represents a danger

              • [deleted]

              • Post #10

              Does anyone have a solution to create a Google account without having to give a phone number?

                [deleted] Thanks, I didn't think so, I'll just keep using the Play Store then.

                  Stewart
                  The way I see it, you don't have to login to Google services to download with Aurora so logically it means less data connected to your account.

                      • [deleted]

                      • Post #13

                      wuseman Whether it is Aurora Store or the Play Store you must have a Google account. On Aurora there are anonymous accounts but you would share your connection tokens with other users that you do not know. Aurora is therefore not anonymous with the “anonymous” connections solution. a MITM attack can be carried out since TLS certificates are not pinned. But then since it's more private to have your own Google account, you might as well have the real Playstore. The GOS developers have worked a lot for this last solution.

                        • [deleted]

                        • Post #14

                        wuseman Not OP but I would rather leak some extra data to Google rather than use an account of total stranger with random locale settings.

                          [deleted] not specifically but second best may be to create a secondary phone number eSIM using silent.link and can discard after

                            Google services can see what you’ve got installed on your phone anyway regardless of where you download so you may as well have the extra safety and use the play store with an account not linked to your real identity.

                            Or just FOSS everything.