yalp on a replicant phone, anything to say against that?
- Vous devez vous identifier ou créer un compte pour écrire des commentaires
On my replicant 6 phone I can install yalp from fdroid. Then yalp must be free software. Are
there reasons to say you should not install yalp?
You do not have to mention that yalp will enable you to install non free
software on the phone. Does the connection to google in
itself cause privacy and security issues? Thank you.
> Does the connection to google in itself cause privacy and security issues?
It would seem like your question is at least partially answered on the YalpStore GitHub page:
"Each time you log in a new Google Services Framework id (also known as device id) is generated using your device parameters. The list of parameters Google requires for that is rather long (example). They are used for app filtering and compatibility checks on the server side. It is possible to mimic a different device. In Yalp Store settings you will find a list of bundled device definitions. Note that no personal info is disclosed, only technical information about your device. When the GSF id is ready, your email and password (if you provided them) are used to generate an authorization token. The authorization token is used to sign all Play Store API requests. Your password is used only once and is not stored, the token is enough for all the requests." https://github.com/yeriomin/YalpStore
Assuming google is smarter than most then I should refrain from
yalp. I do not have strong understanding of what data
google gets if you connect via yalp.
Yalp is not about stopping google's data hoovering if you
want to install software from google play? Or does
device spoofing tell you differently?
Yalp is about letting you install software from google
play should you have a phone with no google play?
Signal is not on fdroid. On my phone downloading files does not
work. I have to download signal apk from
https://signal.org/android/apk/
on my computer. Move the file to my phone and install it. If
it is about one program I do it. If several programs
I do not bother.
> Yalp is not about stopping google's data hoovering if you want to install software from google play? Or does device spoofing tell you differently?
I think that device spoofing should prevent Google from identifying you from your device parameters. I'm unclear though on whether Yalp proxies the download. If not, you'll also need a VPN to stay anonymous from Google.
- Vous devez vous identifier ou créer un compte pour écrire des commentaires