| 7 Mar 2024 |
 Muntashir Akon | In reply to @db9:matrix.org
By splits I mean bundles. The stuff when open an apk in lib folder there is folders and files for arm64-v8, arm-v7, x86 and x64. System installer installs only the folder and files corresponding the system but app manager installs all the folders and files. Installing only the corresponding folder and files can significantly reduce the size of the app and make it more lighter and faster when running it I think you mean universal APK files here which support every platforms, therefore, contain every platform binaries and other resources. App Manager has no control over how these files are extracted since they are determined by the system in accordance with the values declared in the manifest of the app. App Manager can only control the configuration of the split APKs (APKS/XAPK/APKM or simple a zip of APKs). | 06:12:06 |
| Muntashir Akon | In reply to @db9:matrix.org
Dex2oath optimizing when applying to a list of apps if it encounters a problem with an app it stops processing the list rather than skip the app I shall look into this. | 06:12:31 |
| 15 Mar 2024 |
|  @arsrysn:matrix.org left the room. | 22:39:50 |
| 19 Mar 2024 |
 § | In reply to @muntashir:matrix.org
Both GitHub and Google Play aren’t safe from the possibility of introducing new malware at a later update. IzzyOnDroid, on the other hand, has a better way to handle such issues, though I believe it needs more improvements and transparency (we, for example, do not know how it ensures the APKs downloaded from GitHub are indeed from GitHub). All in all, IzzyOnDroid is the best way to download APK files right now. If the app is available on F-Droid official, only the reproducible builds maybe trusted (but, unfortunately, there’s no way to distinguish between them). > we don't know how it ensures the APKs downloaded from GitHub are indeed from GH
What's the best approach here? Calculate the file hash & show on izzy site? | 09:10:33 |
| § | Signature verification already there is it not enough for transparency? | 09:24:08 |
| § | * Signature verification already there is it not enough for transparency?
[https://apt.izzysoft.de/fdroid/index/info#security] | 09:26:49 |
| 20 Mar 2024 |
 obersuppenruehrer | Muntashir, I wish you would add a (possibly optional) checkbox to disable apk signing in the install dialog, if auto sign is activated. It is quite inconvenient to run through main settings, and that twice, every time i want to opt out of auto signing for the occasional app. | 21:07:47 |
| 21 Mar 2024 |
|  @jgfutx7:nitro.chat joined the room. | 13:40:22 |
| 22 Mar 2024 |
| @jgfutx7:nitro.chat left the room. | 23:12:17 |
| 24 Mar 2024 |
| Muntashir Akon | In reply to @obersuppenruehrer:matrix.org
Muntashir, I wish you would add a (possibly optional) checkbox to disable apk signing in the install dialog, if auto sign is activated. It is quite inconvenient to run through main settings, and that twice, every time i want to opt out of auto signing for the occasional app. Already available in the alpha release. | 18:44:17 |
| Muntashir Akon | In reply to @shuvashish76:matrix.org
> we don't know how it ensures the APKs downloaded from GitHub are indeed from GH
What's the best approach here? Calculate the file hash & show on izzy site? One way to ensure whether the correct APK files are downloaded is by implementing SSL pinning for the GitHub servers or by IP address validation (GitHub lists all its IP addresses in their docs). Signature verification works only if the last APK is malicious. What if all APKs were malicious, or if it’s a new app? | 18:49:24 |
| 26 Mar 2024 |
|  @fadikkop:matrix.org left the room. | 16:33:37 |
| 27 Mar 2024 |
| § | Is there a limit to show search bar for SAF only if it exceeds certain number of visible granted URIs)? I see search bar for some apps for not all.. is it set to 6 ? | 13:39:13 |
| obersuppenruehrer | Redacted or Malformed Event | 13:47:36 |
| obersuppenruehrer | * In the 4.0 alpha? Where? I am using latest debug version. | 13:48:31 |
| obersuppenruehrer | In reply to @muntashir:matrix.org
Already available in the alpha release. 😵💫 Facepalm Damn, sorry. Sometimes i don't see the forest for the trees | 13:54:43 |
| § | I don't see them either, my mind always looking for ghosts (in both forest & AM debug) | 13:58:42 |
| § | * Sometimes I don't see them (the features) either, my mind always looking for ghosts/bugs (in both forest & AM debug) | 14:00:36 |
| 28 Mar 2024 |
|  Rohann changed their profile picture. | 08:15:17 |
| 30 Mar 2024 |
|  WMCB Tech (marcusz) changed their profile picture. | 00:01:44 |
| Muntashir Akon | Regular users should take the time to read the release notes. These notes are usually cumulative. | 23:12:07 |
| 1 Apr 2024 |
| § | In reply to @muntashir:matrix.org
Both GitHub and Google Play aren’t safe from the possibility of introducing new malware at a later update. IzzyOnDroid, on the other hand, has a better way to handle such issues, though I believe it needs more improvements and transparency (we, for example, do not know how it ensures the APKs downloaded from GitHub are indeed from GitHub). All in all, IzzyOnDroid is the best way to download APK files right now. If the app is available on F-Droid official, only the reproducible builds maybe trusted (but, unfortunately, there’s no way to distinguish between them). F-Droid vs Izzy repo Article by IzzyOnDroid: https://www.kuketz-blog.de/android-apps-auf-dem-seziertisch-eine-vertiefte-betrachtung/ | 07:03:47 |
| § | 
Download image.png | 07:04:08 |
