(enaix.github.io)

194 points sleirsgoevy | 1 comments | 31 Oct 25 20:20 UTC | HN request time: 0s | source

Show context

immibis ◴[31 Oct 25 23:32 UTC] No.45777864[source]▶

I'm already banned from publishing Android apps through Google, but apart from that, what would stop me making a server you can upload any app to and sign it with my certificate?

replies(1): >>45778504 #

maxloh ◴[01 Nov 25 01:26 UTC] No.45778504[source]▶

>>45777864 #

That could actually be done solely on the device. You can develop an app to sign arbitrary APKs with users' own hobbyist certificate. Lucky Patcher have done that for a decade.

replies(2): >>45780762 #>>45780999 #

1. sleirsgoevy ◴[01 Nov 25 12:03 UTC] No.45780999[source]▶

>>45778504 #

Making every user to "verify" themselves with a government ID is a no-go, because government IDs are no more trustworthy than a toilet paper.

↑

A theoretical way to circumvent Android developer verification