Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BETA: AIMSICD-Installer on GooglePlay #202

Closed
bili123 opened this issue Dec 10, 2014 · 43 comments
Closed

BETA: AIMSICD-Installer on GooglePlay #202

bili123 opened this issue Dec 10, 2014 · 43 comments

Comments

@bili123
Copy link

bili123 commented Dec 10, 2014

Hi there! I do understand the issues with Google Play and its policies but there's one problem regarding mainstream users: What's not on Play, barely exists. F-Droid ist great but even most techies don't really care about it. I wrote dozens of articles about it and the feedback was - well, what feedback ...

So it would be great to find a way to get on Google, a simple launcher would do the job.

But even if it's not the app itself: I don't love the idea, but just to get thinking started: What about some sort of IMSI Catcher Information App with basic information about AIMSICD, IMSI Catcher, background articles (wikipedia) and all above a launcher or link. Just a first brainstormed idea ...

@SecUpwN
Copy link
Member

SecUpwN commented Dec 10, 2014

Good evening, @bili123! Thank you for opening this Issue. Just for all the others following, our statement about GooglePlay is to be found in our FAQ. But personally speaking, I agree with your main points.

So it would be great to find a way to get on Google, a simple launcher would do the job.

Since you seem to not be the only one screaming to have some sort of launcher on GooglePlay, we've been thinking about creating an AIMSICD-Installer, which just pulls the APK from GitHub and launches this right afterwards. Would that be a solution to this Issue and the whole GooglePlay thing in general?

What about some sort of IMSI Catcher Information App with basic information about AIMSICD, IMSI Catcher, background articles (wikipedia) and all above a launcher or link. Just a first brainstormed idea..

Well, when I release the AIMSICD-Installer, I will make sure to add some relavant information to that page and maintain it properly. But in our eyes creating a separate APK just for more information is overkill. On the official GooglePlay page (if @E3V3A and @He3556 agree that I should create one), I will add links to relevant news so that people know whether installing our App is a good thing or not. Fair solution?

@He3556
Copy link
Collaborator

He3556 commented Dec 10, 2014

indeed, some kind of existance on Google Play would rise up our hits and downloads. But we should think about the right time to do this.

@bili123
Copy link
Author

bili123 commented Dec 10, 2014

Since you seem to not be the only one screaming to have some sort of launcher on GooglePlay, we've been thinking about creating an AIMSICD-Installer, which just pulls the APK from GitHub and launches this right afterwards. Would that be a solution to this Issue and the whole GooglePlay thing in general?

From my point of view that would be perfectly fine, it's just all about giving users an easy and - can't believe I'm writing this - trustworthy place to get the app. (That information app thing was just meant as an alternative if a simple lauchner wouldn't work for any reason, so forget that.)

@He3556
Copy link
Collaborator

He3556 commented Dec 10, 2014

That's actually an interessting point @bili123. A simple download link - or even automatic forwarding could violate against the terms and conditions.

@SecUpwN
Copy link
Member

SecUpwN commented Dec 10, 2014

A simple download link - or even automatic forwarding could violate against the terms and conditions.

Another reason why GooglePlay is so unfriendly towards projects like ours. I don't get why Google crafted such a funky Android system but refuses to make GooglePlay a better place for publishers. Where exactly in the terms does Google prohibit that an App published there fetches an APK and executes it?

Here is another tricky idea: @He3556, how about an App that does nothing else than display our QR skull and show a sentence like ATTENTION: This project values your privacy. Google would kick our App from the PlayStore if we would publish it here. Please use a QR-Code scanner to grab the latest APK! The user would have to use a separate QR code scanner. Could they prohibit this? 😈

But I wonder why darshak is still on GooglePlay with their complete App. Did Google not see that?

@E3V3A
Copy link
Contributor

E3V3A commented Dec 11, 2014

Looking at my daily XPosed log, on what the GooglePlay app is tying to access, install, remove and update, including app lists, phone and SMS records and extremely detailed location info. I'm more than confident to say that using GooglePlay and any of their related products, for privacy oriented apps, are just a hairs width away from insanity. So if people are interested in privacy, they should simply stay away from the NSA/Google snuggle bunny! And if they're not interested in keeping up our privacy, they don't need and shouldn't use this app.

@E3V3A
Copy link
Contributor

E3V3A commented Dec 11, 2014

That said, it doesn't mean I'm against having a GP installer app, just that the user think twice before installing it, as it would be equivalent to actually having our app on GP, minus the other drawbacks.

@SecUpwN
Copy link
Member

SecUpwN commented Dec 11, 2014

That said, it doesn't mean I'm against having a GP installer app, just that the user think twice before installing it, as it would be equivalent to actually having our app on GP, minus the other drawbacks.

Thanks for taking a strong stand against using GooglePlay, @E3V3A. I fully support your reasoning (and really feel shitty about being pushed to even register with GooglePlay and maintain that page), but even though we have a huge follower base, I also do understand that people would like to see some sort of project reference on GooglePlay. What do you think of this proposal here, @E3V3A and @He3556?

  1. I will open up an official GooglePlay store page (is there a way to do this for free?)
  2. I will create a simple and tiny App which once installed and clicked prompts this (new) sentence:
    ATTENTION: Our project values your privacy. Google would kick our App from the PlayStore if we would publish it here. Please use a QR-Code scanner to grab the full App from our official stores! Below the sentence, our QR code skull will be shown.
  3. I will add more information about the Apps purpose and continually maintain that page.

The only thing I worry about, would be that people will actually complain underneath our App page and discredit it because we only provide a launcher. Let me know what you think about this, @bili123.

@E3V3A
Copy link
Contributor

E3V3A commented Dec 12, 2014

We should wait with this. I don't think we should put an alpha stage app on GP. Everyone would just complain that it doesn't work and give it bad ratings.

@SecUpwN
Copy link
Member

SecUpwN commented Dec 12, 2014

We should wait with this. I don't think we should put an alpha stage app on GP. Everyone would just complain that it doesn't work and give it bad ratings.

Fully agree. Renamed this Issue and put it on the waiting list for BETA stage.

@SecUpwN SecUpwN changed the title AIMSICD on Google Play BETA: AIMSICD-Installer on GooglePlay Dec 12, 2014
@bili123
Copy link
Author

bili123 commented Dec 12, 2014

The only thing I worry about, would be that people will actually complain underneath our App page and discredit it because we only provide a launcher. Let me know what you think about this

I bet some will, there are always bad comments about apps that aren't exactly what users expect. Hard to say if the benefits through more attention overweigh any discredits.
Personally, I'd still prefer the attention. Of course @E3V3A is right with

So if people are interested in privacy, they should simply stay away from the NSA/Google snuggle bunny!

but most people are on GP, so I guess that's a good place to tell them "Hey, think about privacy!". And what would do that job better than an app, that's interesting enough to at least install and try it.
But my point of view is the one of a free software enthusiast and journalist - as a developer I'd maybe put more emphasis on integrity and avoid Google ...

We should wait with this. I don't think we should put an alpha stage app on GP. Everyone would just complain that it doesn't work and give it bad ratings.

Definitely.

@SecUpwN
Copy link
Member

SecUpwN commented Dec 13, 2014

@bili123, there are a few more things that kept us from publishing anything on the crappy PlayStore:

  1. Developers will have to pay money for registering. Wait a second..
  2. When registering, developers have to use their REAL DATA. WTF?!
  3. Add your credit card data. YeaH right. ARE YOU KIDDING ME?

Tell me how to fully stay anonymous and use this place for free. Their developer rules make me angry! And just between us: The idea of a launcher or anything else for more publicity is great, but we have enough followers - we need more DEVELOPERS! Those script kiddies from GooglePlay won't help us any! Show me ONE App that successfully drew more attention to development. If looking at famous Apps that have been crafted on XDA and put on GooglePlay, all I see is that people are actually putting negative ratings or more wishes on GooglePlay, rather than actually helping. As for me, Google = NSA.

But my point of view is the one of a free software enthusiast and journalist - as a developer I'd maybe put more emphasis on integrity and avoid Google ...

Which closes the circle for me. I guess if we cannot circumvent the above, we should really avoid it. On the other hand: Any dude could upload our App there and promote it as his own project. I don't like that much either. So what do you suggest to do, @He3556? I feel kinda stuck on this. Too emotional for me.


EDIT: I am registering with fake data right now. Expect me to be on GooglePlay later today, I will update this Issue once I have uploaded a launcher. I hope you will thank us will a pull request for all this..

@andr3jx
Copy link
Contributor

andr3jx commented Dec 13, 2014

Yes you need to pay but if I unterstood correct you can use Google Play gift cards to pay. For the rest you could use fake data or ask somebody who has no problem with deanonymization.

@SecUpwN
Copy link
Member

SecUpwN commented Dec 13, 2014

Yes you need to pay but if I unterstood correct you can use Google Play gift cards to pay. For the rest you could use fake data or ask somebody who has no problem with deanonymization.

Thanks, @andr3jx. I will fully register with fake data and pay with a gift card. Stay tuned.

@andr3jx
Copy link
Contributor

andr3jx commented Dec 13, 2014

@SecUpwN We don't need to host our app on Google Play yet. We will consider this step when we are in Beta stage.

@andr3jx
Copy link
Contributor

andr3jx commented Dec 13, 2014

@SecUpwN I didn't find enough sources which confirm that you can pay the registration fee with the gift card. Let's assume I was wrong.

@SecUpwN
Copy link
Member

SecUpwN commented Dec 13, 2014

We don't need to host our app on Google Play yet. We will consider this step when we are in Beta stage.

You are right, @andr3jx. But I guess publishing the launcher with the QR code can be done any time.

I didn't find enough sources which confirm that you can pay the registration fee with the gift card. Let's assume I was wrong.

I will just give it a try. If it doesn't work, I will delete my account there and let you folks know here.

@andr3jx
Copy link
Contributor

andr3jx commented Dec 13, 2014

The QR code idea is ridiculous.
I checked now Google Play developer console and we can assume I'm right:
gp

@SecUpwN
Copy link
Member

SecUpwN commented Dec 13, 2014

The QR code idea is ridiculous.

A ridiculous store does not deserve non-ridiculous Apps.

I checked now Google Play developer console and we can assume I'm right.

So there is no way other than giving away all private information, adding a real credit card and be completely identified through the whole process? The more I think about all this and which sort of "launcher" to put there, the creepier it gets. Anyone respecting our work should just refrain from using GooglePlay and down-/uploading our App from there. I keep thinking about really closing down this GooglePlay Issue until some sort of anonymous payment is possible. But as long as that does not happen, I do NOT want our App to be featured there at all - no launcher, no link, no nothing.

And to make my point clear: I will personally hunt anyone uploading our App there. Why? Because Open Source and FOSS blood is pumping through my veins - GooglePlay is doing the complete opposite here. We are on Aptoide, GitHub and F-Droid, also we have a large number of great Press Releases - anyone interested in privacy and googling up IMSI-Catchers will instantly find us. @bili123, may I close this for good and link it in our FAQ? If you see a way to anonymously pay the $25 registration fee (other than letting anyone else upload our App to their own store), let me know. I am still open for suggestions.

@bili123
Copy link
Author

bili123 commented Dec 13, 2014

@bili123, may I close this for good and link it in our FAQ?

yes, completely convinced, this credit card stuff's just nuts.

If you see a way to anonymously pay the $25 registration fee (other than letting anyone else upload our App to their own store), let me know. I am still open for suggestions.

I'll take a look, but ...

@E3V3A
Copy link
Contributor

E3V3A commented Dec 13, 2014

You guys are cracking me up! Thanks for the pre-Xmas excitement.

@SecUpwN I'm totally with you all the way on this. If you really want to use a CC to pay, sign up for the Abine (recommended) anonymizing service or Entropay. They offer such a solution. However, I know Google sometimes ask for a phone number so they can send you an authentication token via SMS. So you need a pre-paid SIM card and a burner phone (since they'll surely also register your IMEI with that SMS.)

@andr3jx
Copy link
Contributor

andr3jx commented Dec 13, 2014

There is also a possibility to pay with a prepaid Visa Card. You can buy it without providing personal information on petrol stations for example.

@SecUpwN
Copy link
Member

SecUpwN commented Dec 14, 2014

You guys are cracking me up! Thanks for the pre-Xmas excitement.

@E3V3A, what do you mean by that? Are you excited we are still trying to put something there, or do you enjoy that we rubb our asses just to find out that GooglePlay provides hurdles behind every wall?

@andr3jx thanks for the recommendation with the prepaid VISA card. I will see when and if I can get one and let you know on the process here. But what exactly to upload on GooglePlay then?

@andr3jx
Copy link
Contributor

andr3jx commented Dec 14, 2014

I repeat: For now we don't need GP, we will consider to upload an installer when we are in Beta stage.

@E3V3A
Copy link
Contributor

E3V3A commented Jan 21, 2015

Are we still considering this? Perhaps we can close this...for now?

@SecUpwN SecUpwN closed this as completed Jan 21, 2015
@SecUpwN
Copy link
Member

SecUpwN commented Feb 27, 2015

Since our App has been published on GooglePlay without asking us beforehand (App is already filed for removal and "author" properly notified, thus I won't link it), I am reopening this and will create an official GooglePlay Account for our App after it has been removed by the other uploader. Since we still stand strong to our opinion against GooglePlay, we want to upload an Installer that does the following things:

  1. App has to have the same HD Icon like ours has
  2. Upon clicking it, a window shows a DOWNLOAD button or clickable Image
  3. App checks if either Aptoide and/or F-Droid or no store at all is installed
  4. If Aptoide is installed, it shall add our Aptoide store and install AIMSICD from there
  5. If F-Droid is installed, it shall fetch AIMSICD from there and continue to install it
  6. If both stores are installed, Aptoide will be preferred
  7. If no store at all is installed, the App shall grab the latest GitHub Release and install it

Does that sound like a good solution to this problem, @E3V3A and @He3556?

@SecUpwN SecUpwN reopened this Feb 27, 2015
@E3V3A
Copy link
Contributor

E3V3A commented Feb 27, 2015

Sound excellent! The downloader app should also display the signature of the downloaded version for easy verification with our GitHub releases.

@SecUpwN
Copy link
Member

SecUpwN commented Mar 1, 2015

@E3V3A, I would like to keep development of the downloader app on our GitHub here as well. Shall I add a new branch for this or what would you prefer?

@E3V3A
Copy link
Contributor

E3V3A commented Mar 1, 2015

That's not a new branch, that would be a new repo. See internal chat.

@SecUpwN
Copy link
Member

SecUpwN commented May 2, 2015

With more bad news of Google turning up, we've finally DITCHED this idea. Please do NOT upload our app on GooglePlay (not even as a re-branded installer) and carefully read our statement. Thank you!

@SecUpwN SecUpwN closed this as completed May 2, 2015
@TPS
Copy link

TPS commented Aug 7, 2015

@E3V3A
Copy link
Contributor

E3V3A commented Aug 7, 2015

And blatant copies...without any cred references.

@TPS
Copy link

TPS commented Aug 7, 2015

For the record, (& I have followed all the arguments from the beginning) not having an official presence on GPlay encourages this kind of misbehavior, & also makes it harder to enforce claims of IP infringement.

@E3V3A
Copy link
Contributor

E3V3A commented Aug 8, 2015

The issue is that we would like to have an installer presence in GP, but that we: (a) Refuse to pay for it while (b) give up our anonymity in the process. If any one of our trusted developers feel he's got nothing to loose here, they're certainly free to make it such.

@TPS
Copy link

TPS commented Aug 8, 2015

I'm not disagreeing with any of that; just pointing out Google's rules favor them_selves_ 1st, even above AICD's intellectual property rights.

Other than tagging these IP infringement while in Play Store, is there a more effective way to complain?

@TPS
Copy link

TPS commented Aug 8, 2015

Other than tagging these IP infringement while in Play Store, is there a more effective way to complain?

I guess there is:
https://support.google.com/legal/troubleshooter/1114905

But this has to be done by the official "copyright holder." Is this you, @SecUpwN?

@SecUpwN
Copy link
Member

SecUpwN commented Aug 9, 2015

@SecUpwN https://play.google.com/store/apps/details?id=com.SecUpwN.AIMSICD is still live. =(

Thanks for notifying me, @TPS. I can't visit the URL, it seems to have been taken down already.

And blatant copies...without any cred references.

I have been writing a message to that guy already to stop copying our work and respecting the GPL - without any effect. Thanks to the link of @TPS, I just filed a copyright infringement. And to be honest: I am pretty sick of this shit and keep playing with the thought of giving up and providing our app on this shitty GPlay store - but then, I am very reluctant to even see it there, even if someone else would do it!

@TPS
Copy link

TPS commented Aug 9, 2015

@SecUpwN I think it's not taken down; I think the guy blocked your country or something, as I can directly get to it from the link still. This guy really frosts me! (Since especially he doesn't update nor give credit.) 😡 It's obviously still worth filing on that 1st 1, then.…

@SecUpwN
Copy link
Member

SecUpwN commented Aug 9, 2015

This guy really frosts me! (Since especially he doesn't update nor give credit.)

@TPS, I am quite happy that he does not update. Other than that, I hereby grant permission to you to act on my behalf and file a proper and well-written copyright infringement on that copy. For the future, I guess we should find someone working for GooglePlay and being able to remove stuff if we tell him/her.

@TPS
Copy link

TPS commented Aug 10, 2015

@SecUpwN

I am quite happy that he does not update.

Problem with that is that most people will then find that version of AICD first when searching for in the their logical starting place — Google Play. 99% of people would never even think to look further, &, when they've problems, then they'll rate AICD poorly, which ends up in Google search ratings, which ruins this project's (& all its hard-working devs') reputation. It took me months to discover the Play store "version" wasn't official!

Regardless, I'm happy to file the report on your behalf. Do you have a copy of the report you already filed, to avoid missing anything important? Else, I will post here, with what I come up with before I submit, to get feedback, ok?

@SecUpwN
Copy link
Member

SecUpwN commented Aug 10, 2015

@TPS, I do get the point regarding our reputation and I feel the need for our project to hack around the GooglePlay privacy breaches. If there was a way for to register an account without spending money and losing privacy, I'd create an official one ASAP - feel free to help me digging one up and send it to my email address. Other than that, I have not kept a copy of my report. Just explain in simple words what you just mentioned and maybe even link to this discussion, if you wish.

Else, I will post here, with what I come up with before I submit, to get feedback, ok?

No, please don't. I want avoid to resurrect this Issue from the dead. Too many people involved. And just to mention it: Our app is called "AIMSICD" in short, not "AICD" - please use that in further postings. ;-)

@vanitasvitae
Copy link

Have you thought about adding the fact, that AIMSICD is not available in the PlayStore, to the app itself? That way a user who wants to tell other people about the app is reminded to tell them where (not) to look for the app.

@SecUpwN
Copy link
Member

SecUpwN commented Jan 25, 2016

Have you thought about adding the fact, that AIMSICD is not available in the PlayStore, to the app itself?

@vanitasvitae, it is mentioned everywhere across our project and we also linked this FAQ entry. Feel invited to craft a pull request if you'd like to see an improvment on our app somewhere. Thank you.

@CellularPrivacy CellularPrivacy locked and limited conversation to collaborators Jan 25, 2016
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

7 participants