Originally I’ve download the signal app through playstore, but often it also get updates from Droid-ify(Fdroid client). Today its weird and I got this . Explain to me this.

On the Droid-ify the signal app is provided by: org.thoughtcrimes.securesms

  • nottheengineer@feddit.de
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    1 year ago

    The package name is correct, but signal was never on F-droid.

    Do you have a third party repo that might be compromised?

    Edit: Package name isn’t correct, so that’s almost definitely a compromised version. Get rid of it ASAP.

    • miss_brainfart@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      To add to that:

      Always check the projects’ website to see the official ways it’s distributed, before you just download it from anywhere.

        • miss_brainfart@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          Not a fan of that either, that really is unfortunate. But with a bit of common sense, a person should then ask about that, if the Play Store is not an option. It’s still not a reason to download it from a source you haven’t verified to be official

          • Pantherina@feddit.de
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            No thats absolutely a reason. Signal is 100% to blame that they have no fully FOSS code repository that could then simply be compiled by FDroid and shipped there.

            Instead I have to rely on some Dude I know nothing about, Twinhelix could just as well spread Malware. But I like my updates through FDroid, I like a blob Free Signal

    • Otter@lemmy.ca
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      1 year ago

      org.thoughtcrimes.securesms

      It actually might not be, googling "org.thoughtcrimes.securesms" doesn’t get results.

      thoughtcrimes vs. thoughtcrime


      My question though is how this popped up in droidify, would someone need to manually add some special repo?

      • nottheengineer@feddit.de
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        I missed that, thanks for pointing it out. The one without S is the correct one.

        But that makes me wonder, how did OP not end up with two signal apps then?